# Need the Grok patter

**URL:** <https://discuss.elastic.co/t/need-the-grok-patter/136557>\
**Category:** Elasticsearch\
**Created:** [June 19, 2018, 6:58pm UTC](https://discuss.elastic.co/t/need-the-grok-patter/136557 "2018-06-19T18:58:30Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![satish161418](https://avatars.discourse-cdn.com/v4/letter/s/35a633/32.png) [@satish161418](https://discuss.elastic.co/u/satish161418)\
**Post date:** [June 19, 2018, 6:58pm UTC](https://discuss.elastic.co/t/need-the-grok-patter/136557/1 "2018-06-19T18:58:30Z")

</div>

Error Message: Cross reference value is not found for the UPC- 35234308722 in the cache UPCWOCHKDGT for PSTNG\_DATE - 1180607##NA##NA##NA##NA##0fa31d40-461a-1b80-bdd4-ffffff70cf80##Administrator##null##null

I wrote ; and got

%{GREEDYDATA:ERROR\_MESSAGE}

"ERROR\_MESSAGE": [  
[  
" Cross reference value is not found for the UPC- 35234308722 in the cache UPCWOCHKDGT for PSTNG\_DATE - 1180607##NA##NA##NA##NA##0fa31d40-461a-1b80-bdd4-ffffff70cf80##Administrator##null##null"  
]  
]  
}

But i need

"ERROR\_MESSAGE": [  
[  
" Cross reference value is not found for the UPC- 35234308722 in the cache UPCWOCHKDGT for PSTNG\_DATE - 1180607  
]  
]  
"GREEDYDATA" : [  
[  
##NA##NA##NA##NA##0fa31d40-461a-1b80-bdd4-ffffff70cf80##Administrator##null##null"  
]  
]  
}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 17, 2018, 6:58pm UTC](https://discuss.elastic.co/t/need-the-grok-patter/136557/2 "2018-07-17T18:58:33Z")

</div>

Closed on July 17, 2018, 6:58pm UTC

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.