# PATTERN ERROR WHEN ADDING IN INGEST PIPELINE GROK PROCESSOR

**URL:** <https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667>\
**Category:** Kibana\
**Created:** [January 18, 2022, 8:36am UTC](https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667 "2022-01-18T08:36:53Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![mohammadawaisjavaid](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mohammadawaisjavaid/32/60807_2.png) [@mohammadawaisjavaid](https://discuss.elastic.co/u/mohammadawaisjavaid)\
**Post date:** [January 18, 2022, 8:36am UTC](https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667/1 "2022-01-18T08:36:53Z")

</div>

Hi all,  
I am stucked in one thing and want to ask in community that I am trying to create a grok pattern for a log and in dev tools grok tester I am successfull in writing up a pattern as the below screenshow indicates my successfullness.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1f6f2d32c6c171688af2824f9deea3d0950475f.png)  
Now when i try to add the pattern in the ingest pipleine processor it is throwing error that there is something wrong in pattern  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/a/d/adbe6df1c0167e1d4f8411bb7ba68894b0f30326.png)  
Now when I remove \ from the pattern then it is accepting but it results in that my logs are not parsed as I want them to as shown below  
Now after removing \ from the pasrser the ingest pipelines process is allowing me to add but my log will not be parsed as \ is needed to identify the square brackets which are in my log  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/1/f1e8b640947fd99451d193fa04fe6036f24edc7e.png)

My question here is that are not the both devtool grok and ingest pipelines grok same? Or if they are different then what should i use instead of \ in order for my grok pattern to work as expected in the ingest pipeline.

Looking forward towards response

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [February 15, 2022, 8:36am UTC](https://discuss.elastic.co/t/pattern-error-when-adding-in-ingest-pipeline-grok-processor/294667/2 "2022-02-15T08:36:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.