# Unstructured Data and Elastic

**URL:** <https://discuss.elastic.co/t/unstructured-data-and-elastic/93620>\
**Category:** Elasticsearch\
**Created:** [July 18, 2017, 4:04pm UTC](https://discuss.elastic.co/t/unstructured-data-and-elastic/93620 "2017-07-18T16:04:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![elaair](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@elaair](https://discuss.elastic.co/u/elaair)\
**Post date:** [July 18, 2017, 4:04pm UTC](https://discuss.elastic.co/t/unstructured-data-and-elastic/93620/1 "2017-07-18T16:04:30Z")

</div>

I have just started my journey with Elastic Stack. It is really cool so far. I have ELK up, I have created my own filters for named and DHCP using Logstash with GROK, and have started basic visualization with Kibana. My next foray is into un structured data, that is, data that is to mangled to effectively GROK. Is un structured data still searchable, useful for visualizations and available for analytics ?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [July 19, 2017, 1:24am UTC](https://discuss.elastic.co/t/unstructured-data-and-elastic/93620/2 "2017-07-19T01:24:15Z")

</div>

It's searchable, but without some structure it might not be super valuable for analytics.

---

<div class="post-metadata">

**Author:** ![elaair](https://avatars.discourse-cdn.com/v4/letter/e/6f9a4e/32.png) [@elaair](https://discuss.elastic.co/u/elaair)\
**Post date:** [July 21, 2017, 5:54pm UTC](https://discuss.elastic.co/t/unstructured-data-and-elastic/93620/3 "2017-07-21T17:54:49Z")

</div>

I thought as much. It doesn't seem like developing GROK parsers or using the CEF plugin is a big lift.  
THX!!

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [August 18, 2017, 5:55pm UTC](https://discuss.elastic.co/t/unstructured-data-and-elastic/93620/4 "2017-08-18T17:55:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.