# Help sanitizing new lines

**URL:** <https://discuss.elastic.co/t/help-sanitizing-new-lines/373823>\
**Category:** Logstash\
**Created:** [January 29, 2025, 1:15pm UTC](https://discuss.elastic.co/t/help-sanitizing-new-lines/373823 "2025-01-29T13:15:29Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Tortoise](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/tortoise/32/147587_2.png) [@Tortoise](https://discuss.elastic.co/u/Tortoise)\
**Post date:** [January 29, 2025, 1:27pm UTC](https://discuss.elastic.co/t/help-sanitizing-new-lines/373823/2 "2025-01-29T13:27:12Z")

</div>

> [@Jose\_E](#):
>
> `127.0.0.1:37672 [29/Jan/2025:10:29:46.258`

Hola Jose,

Could you please check below post incase if it is helpful?

> [@Haproxy grokparsefailure](https://discuss.elastic.co/t/haproxy-grokparsefailure/229899):
>
> HAPRoxy Logstash Grok Parse Failure This is my log entry from HAProxy (pfsense haproxy package) "message": "\<142\>Apr 27 02:24:00 haproxy[37279]: 162.158.155.249:54250 [27/Apr/2020:02:24:00.173] shared-frontend-merged~ example.com\_ipvANY/emaple.com 0/0/192/170/363 200 3411 - - ---- 2/2/0/1/0 0/0 \"GET / HTTP/1.1\"\n", I have default grok enabled in logstash but i still get log parse failure. is it because the logs have appended syslog header ? grok { match =\> { "message" =\> "%{HAPROXYHTTP}" …

Also could you please share if post upgrade these records are discarded by logstash & what is the error message we see in logstash?

Thanks!!

---

_[View the full topic](https://discuss.elastic.co/t/help-sanitizing-new-lines/373823)._
