# Logstash ignore logs grok filter
**URL:** https://discuss.elastic.co/t/logstash-ignore-logs-grok-filter/213578
**Category:** Logstash
**Created:** [January 2, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-ignore-logs-grok-filter/213578 "2020-01-02T13:18:55Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Aayush\_Agrawal](https://discuss.elastic.co/u/Aayush_Agrawal)
#### Post date: [January 2, 2020, 1:18pm UTC](https://discuss.elastic.co/t/logstash-ignore-logs-grok-filter/213578/1 "2020-01-02T13:18:55Z")
I want to capture the start time of a log, but if i use grok filter if there are some log with same info they all will be captured. How do i modify the filter as such it ignore rest of the logs with same pattern as soon as it find first match.
for example i have logs like this and i want only start time and end time, so the first line and last line.
[DEBUG main : 01/01/2020-00:07:11.884 : ValidationUtil] Validating Path:/opt/cford-app/
[DEBUG main : 01/01/2020-00:07:11.885 : ValidationUtil] Validating Path:/dump/
[DEBUG main : 01/01/2020-00:07:11.885 : ValidationUtil] Validating Path:/opt/middleware/
[DEBUG main : 01/01/2020-00:07:11.887 : ValidationUtil] Validating Path:/dump/term
[DEBUG main : 01/01/2020-00:07:11.889 : ValidationUtil] Validating Path:/opt/middleware2/
so result should be start time - 01/01/2020-00:07:11.884 , end time- 01/01/2020-00:07:11.889
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [January 2, 2020, 2:02pm UTC](https://discuss.elastic.co/t/logstash-ignore-logs-grok-filter/213578/2 "2020-01-02T14:02:19Z")
You might be able to do it with an aggregate filter.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [January 30, 2020, 2:02pm UTC](https://discuss.elastic.co/t/logstash-ignore-logs-grok-filter/213578/3 "2020-01-30T14:02:21Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.