# Parsing DNS Logs from GCP Cloud

**URL:** <https://discuss.elastic.co/t/parsing-dns-logs-from-gcp-cloud/214911>\
**Category:** Logstash\
**Created:** [January 13, 2020, 10:10pm UTC](https://discuss.elastic.co/t/parsing-dns-logs-from-gcp-cloud/214911 "2020-01-13T22:10:32Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [January 13, 2020, 11:32pm UTC](https://discuss.elastic.co/t/parsing-dns-logs-from-gcp-cloud/214911/2 "2020-01-13T23:32:33Z")

</div>

If you receive that as a single event and want to extract the 6 entries then you can do it using ruby and scan. See [here](https://discuss.elastic.co/t/stop-proccesing-events-lines-after-first-grok-match/214696/10) for an example.

---

_[View the full topic](https://discuss.elastic.co/t/parsing-dns-logs-from-gcp-cloud/214911)._