# Parsing Problem \\""

**URL:** <https://discuss.elastic.co/t/parsing-problem/223445>\
**Category:** Logstash\
**Created:** [March 13, 2020, 4:33am UTC](https://discuss.elastic.co/t/parsing-problem/223445 "2020-03-13T04:33:02Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![pariksh](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pariksh/32/46188_2.png) [@pariksh](https://discuss.elastic.co/u/pariksh)\
**Post date:** [March 13, 2020, 4:33am UTC](https://discuss.elastic.co/t/parsing-problem/223445/1 "2020-03-13T04:33:02Z")

</div>

The output of key\_pairs look like

"key\_pairs" =\> "\"lastName\":\"\",\"address\":null,\"relativeIds\":\"135,\",\"gender\":\"Male\",\"city\":433,\"userId\":4265,\"firstName\":\"Shiv\",\"mrTrendingTags\":\"#निरोगी जिवन\\t\\t#आरोग्याचे फायदे\\t\\t#आहार आणि पोषण\\t\\t#वजन कमी होणे\\t\\t#स्किनकेअर\",\"imageUrl\":\"\",\"name\":\"Shiv\",\"middleName\":\"\",\"enTrendingTags\":\"#Healthy Living\\t\\t#Health Benefits\\t\\t#Diet and Nutrition\\t\\t#Weight Loss\\t\\t#SkinCare\",\"state\":21,\"email\":\"\",\"key\":\"kreativsarg@1234\"",

Logstash config file

```
filter {
   grok{
        match => {"message"=>"%{TIME:time} %{WORD:method}\s(?<java_method>[^(]*)%{GREEDYDATA:message}\{%{GREEDYDATA:key_pairs}\}%{GREEDYDATA:more_data}"}
    }
    if "ExUsernamePasswordAuthenticationFilter.successfulAuthentication" in [java_method] {
   
    mutate {
    
remove_field => ["message"]
remove_field => ["more_data"]
remove_field => ["message"]
  }
}else {
    drop {}
  }
}

I tried
```
json{
        source => "key_pairs"
        target => "parsedJson"
        remove_field=>["key_pairs"]
    }

But it won't work
Thanks
```
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 10, 2020, 4:33am UTC](https://discuss.elastic.co/t/parsing-problem/223445/2 "2020-04-10T04:33:03Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.