# Update pipeline filebeat-6.5.1-nginx-access-default - Error
**URL:** https://discuss.elastic.co/t/update-pipeline-filebeat-6-5-1-nginx-access-default-error/223973
**Category:** Beats
**Tags:** filebeat
**Created:** [March 17, 2020, 4:26pm UTC](https://discuss.elastic.co/t/update-pipeline-filebeat-6-5-1-nginx-access-default-error/223973 "2020-03-17T16:26:13Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@ORich](https://discuss.elastic.co/u/ORich)
#### Post date: [March 17, 2020, 4:26pm UTC](https://discuss.elastic.co/t/update-pipeline-filebeat-6-5-1-nginx-access-default-error/223973/1 "2020-03-17T16:26:14Z")
Trying to update the default pipeline that parses access log files from nginx in order to manage upstream\_response time. This pipeline is installed by Filebeat Nginx module.
As you can check, I added extra field at the end of grok pattern:
`%{NUMBER:nginx.access.upstream_response_time}`
```auto
"grok" : {
"patterns" : [
"%?{IP_LIST:nginx.access.remote_ip_list} - %{DATA:nginx.access.user_name} \\[%{HTTPDATE:nginx.access.time}\\] \"%{GREEDYDATA:nginx.access.info}\" %{NUMBER:nginx.access.response_code} %{NUMBER:nginx.access.body_sent.bytes} \"%{DATA:nginx.access.referrer}\" \"%{DATA:nginx.access.agent}\" %{NUMBER:nginx.access.upstream_response_time}"
],
```
When updating the pipeline via curl command line, I get the error :
` "target of repeat operator is not specified"`
The pb is actualy the leading '?' in grok pattern "%?{IP\_LIST:nginx.acce.......
Does anyone know the reason why we have this leading '?' ... it does not look like the optional field syntax in grok (%{....}?)
Many thanks for your support
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 14, 2020, 4:26pm UTC](https://discuss.elastic.co/t/update-pipeline-filebeat-6-5-1-nginx-access-default-error/223973/2 "2020-04-14T16:26:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.