On This Page

Home / Search/ Enrich and Automate/Grok Patterns

Grok Patterns

Use the built-in library of Grok patterns, or define your own.


A Grok pattern is a string of special characters and regular expressions that match data. Cribl Search uses Grok patterns in definitions for Parsers.

Cribl Search ships with many commonly used Grok patterns. The Grok Patterns page provides an interface for creating and editing them.

To open the Grok Patterns page, select Knowledge > Grok Patterns.

Grok Patterns page
Grok Patterns page

For details about who can access and modify this resource, see Search Member Permissions.

Add a Grok Pattern

  1. On the top right, select Add Grok Pattern File.
  2. Give your custom Grok pattern a unique File name.
  3. Enter your Grok pattern in the Content pane.
  4. Select Save.