# Removing GREEDYDATA from Filter leaves empty "curly brace" at result?
**URL:** https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315
**Category:** Logstash
**Created:** [March 14, 2019, 10:53am UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315 "2019-03-14T10:53:05Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@samyo](https://discuss.elastic.co/u/samyo)
#### Post date: [March 14, 2019, 10:53am UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/1 "2019-03-14T10:53:05Z")
hello Folks,
i have following issue, i am using Grok filter with GREEDYDATA wich i want to remove(drop it of) out of my result, this is what i used , but at result it is still giving me an empty curly brace **{}** wich i do not want to get it in my Result,
logfile example,
abcdefg Final Hello
i want to get as result just **Hello** , nothing else, see my Filter,
grok {
match =\> ["message" , "%{GREEDYDATA} Final %{WORD:word}"]
}
mutate {remove\_field =\> ["message","tags","host',"@timestamp","@version"]}
At Result it should give me just
{"word" : "Hello"}
but it gives me as follow,
{}
{"word" : "Hello"}
How can i remove this empty " **{}**"
thx.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [March 14, 2019, 12:42pm UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/2 "2019-03-14T12:42:09Z")
Are you saying that logstash produces that result? Is that the output from a rubydebug codec? Which version are you running?
---
### Author:  [@samyo](https://discuss.elastic.co/u/samyo)
#### Post date: [March 14, 2019, 2:17pm UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/3 "2019-03-14T14:17:21Z")
that is my all output about, i am using losgstash-6.3.1 version,
output {
file {
path =\> "C:\Users\samyo\Desktop\ELK\outputtest.log"
codec =\> line
}
}
i did not use the rubydebug .
the empty **{}** was full with "message , "@version", "host" etc, wich i deleted with mutate filter.
after deleting those , it stills print me an empty **{}** as result , how can i remove it from end result.
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [March 14, 2019, 3:48pm UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/4 "2019-03-14T15:48:01Z")
The empty {} represents an event from which you have removed all the fields. If you want to ignore lines that do not match the grok filter you could use
```
if "_grokparsefailure" in [tags] { drop {} }
```
after the grok filter.
---
### Author:  [@samyo](https://discuss.elastic.co/u/samyo)
#### Post date: [March 15, 2019, 7:50am UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/5 "2019-03-15T07:50:04Z")
thank you Badger , it works , you are the best 🙂 .
thx .
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 12, 2019, 7:50am UTC](https://discuss.elastic.co/t/removing-greedydata-from-filter-leaves-empty-curly-brace-at-result/172315/6 "2019-04-12T07:50:07Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.