# Logstash pattern does not work after being upgraded to 7.3.0

**URL:** <https://discuss.elastic.co/t/logstash-pattern-does-not-work-after-being-upgraded-to-7-3-0/199681>\
**Category:** Logstash\
**Created:** [September 16, 2019, 2:45pm UTC](https://discuss.elastic.co/t/logstash-pattern-does-not-work-after-being-upgraded-to-7-3-0/199681 "2019-09-16T14:45:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![zozo6015](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/zozo6015/32/12117_2.png) [@zozo6015](https://discuss.elastic.co/u/zozo6015)\
**Post date:** [September 16, 2019, 2:45pm UTC](https://discuss.elastic.co/t/logstash-pattern-does-not-work-after-being-upgraded-to-7-3-0/199681/1 "2019-09-16T14:45:41Z")

</div>

Hello,

I am trying to separate java pattern into fields. I have the following pattern set up with custom pattern setup in order to be able to process multiline fields. However since I have upgraded logstash to 7.3.0 the custom pattern does not seam to work.

```auto
     grok {
       match => { "message" => ["%{MONTH:month} %{MONTHDAY:day}, %{YEAR:year} %{TIME:time} %{WORD:day_period} %{NOTSPACE:[system][jetty][class]} %{WORD:[system][jetty][method]}\n%{GREEDYMULTILINE:multiline}",
                               "%{WORD:severity} in thread \"%{THREADNAME:threadName}\" %{GREEDYDATA:[system][jetty][data]}",
                               "%{WORD:severity} in thread \"%{THREADNAME:threadName}\" %{NOTSPACE:[system][jetty][exceptionClass]}: %{GREEDYDATA:exceptionMessage}\n %{GREEDYMULTILINE:exceptionMultiline}"
                               ] }
       pattern_definitions => {
         "GREEDYMULTILINE" => "(.|\r|\n)*",
         "THREADNAME" => "[^\"]+" }
       remove_field => "host"
    }

```

Has anything changed, or can I change anything in order to make that pattern work again? I have also tried in kibana grok parser but it is also failing in there.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 14, 2019, 2:45pm UTC](https://discuss.elastic.co/t/logstash-pattern-does-not-work-after-being-upgraded-to-7-3-0/199681/2 "2019-10-14T14:45:43Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.