# NOT ABLE TO PARSE SPECIFIC CHUNK OF LOG USING GROK **URL:** \ **Category:** Kibana\ **Created:** [January 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541 "2022-01-17T07:49:21Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![mohammadawaisjavaid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohammadawaisjavaid/32/60807_2.png) [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\ **Post date:** [January 17, 2022, 7:49am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541/1 "2022-01-17T07:49:21Z")
Hi, I have a sample log from a switch. I am trying to parse it in to fields but some how I dont know why it is not allowing me to parse capital letters like let me show you ![image](https://us1.discourse-cdn.com/elastic/original/3X/e/7/e7a28ffd5f2809c7558034018b1eccc0c380f5ae.png) Now this is when I worte PROG then it takes out the whole in to that but when I try to write WORD instead of that then it failed to parse as screenshot is given below. ![image](https://us1.discourse-cdn.com/elastic/original/3X/6/8/6844fe0c97cfd8d6c8b6e839ff22e06b5dfd5f26.png) Since I have noticed that normally %{WORD} is used to parse capital and small alphabets right but in this case I am trying to parse **PHY** in this case and I am not able to view that in the fields. Can any one help me to locate the error. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [February 14, 2022, 7:50am UTC](https://discuss.elastic.co/t/not-able-to-parse-specific-chunk-of-log-using-grok/294541/2 "2022-02-14T07:50:16Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.