# Not able to parse completely with grok

**URL:** https://discuss.elastic.co/t/not-able-to-parse-completely-with-grok/346870
**Category:** Logstash
**Created:** [November 10, 2023, 1:26pm UTC](https://discuss.elastic.co/t/not-able-to-parse-completely-with-grok/346870 "2023-11-10T13:26:30Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![sudhir\_singh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/sudhir_singh/32/104889_2.png) [@sudhir\_singh](https://discuss.elastic.co/u/sudhir_singh)
#### Post date: [November 10, 2023, 1:28pm UTC](https://discuss.elastic.co/t/not-able-to-parse-completely-with-grok/346870/2 "2023-11-10T13:28:53Z")

</div>

```auto
%{NOTSPACE:remoteip}(, %{IP})* "%{HTTPDATE:timestamp}" %{IP:lbip} %{WORD:request_method} "%{WORD:verb} %{DATA:request} HTTP/%{NUMBER:httpversion}" %{NUMBER:request_length} %{NUMBER:status} %{NUMBER:bytes_sent} (?:%{NUMBER:body_bytes_sent}|-) %{DATA:http_referer} %{QS:http_user_agent} %{DATA:upstream_addr} %{DATA:upstream_status} %{DATA:request_time} %{DATA:upstream_response_time} %{DATA:upstream_connect_time} %{DATA:upstream_header_time} %{DATA:upstream_cache_status} %{NOTSPACE:server_name}%{GREEDYDATA:payload}

```

This is my grok pattern but it is not able to parse the logs which starts with double quotes. Double quotes starting lines get ignored completely.

---

_[View the full topic](https://discuss.elastic.co/t/not-able-to-parse-completely-with-grok/346870)._