# Postgresql grpk pattern error fb 6.4
**URL:** https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670
**Category:** Beats
**Tags:** filebeat
**Created:** [September 14, 2018, 6:51pm UTC](https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670 "2018-09-14T18:51:59Z")
**Posts on this page:** 4
**Page:** 1
### Author:  [@bhansen](https://discuss.elastic.co/u/bhansen)
#### Post date: [September 14, 2018, 6:51pm UTC](https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670/1 "2018-09-14T18:51:59Z")
Hello,
I am using filebeat 6.4 with the postgresql module installed and pointed at my pg\_log folder, and it is shipping the logs but I am getting a GROK parse error
the system is centos 7 installed with the filebeat 6.4 rpm Postgresql version is 9.6.6 and my logs look like this
> \< 2018-09-14 11:33:46.724 PDT \> LOG: connection authorized: user=xxxxx database=xxxxx
the error I am getting is `Provided Grok expressions do not match field value:`
---
### Author:  [@jsoriano](https://discuss.elastic.co/u/jsoriano)
#### Post date: [September 17, 2018, 12:13pm UTC](https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670/2 "2018-09-17T12:13:01Z")
Hi @bhansen and welcome 🙂
Your log line looks fine, but the date seems enclosed between `<` and `>`, is it like this in your log file? This is not expected in the grok patterns. Have you customized the log configuration in some way?
---
### Author:  [@bhansen](https://discuss.elastic.co/u/bhansen)
#### Post date: [September 17, 2018, 3:09pm UTC](https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670/3 "2018-09-17T15:09:37Z")
I have not it was installed, then I turned on some of the logging features like log connections etc. each line of the log starts with
\< 2018-09-17 08:08:47.420 PDT \> LOG: connection received: [host=npt-app-09.main.popud.org](http://host=npt-app-09.main.popud.org) port=43502
\< 2018-09-17 08:08:47.421 PDT \> LOG: connection received: [host=npt-app-09.main.popud.org](http://host=npt-app-09.main.popud.org) port=43500
\< 2018-09-17 08:08:47.423 PDT \> LOG: connection received: [host=npt-app-09.main.popud.org](http://host=npt-app-09.main.popud.org) port=43504
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 15, 2018, 3:09pm UTC](https://discuss.elastic.co/t/postgresql-grpk-pattern-error-fb-6-4/148670/4 "2018-10-15T15:09:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.