title: Grok parsing with special characters in message
body: <p>In Logstash/grok how can I parse messages with special characters in the danish alphabet, such as æøå?</p>
  
  <p>I'm trying to parse the following message (IIS log file):</p>
  
  <pre><code>2016-06-12 18:15:10 server01 192.168.10.1 GET /test/charæfoobar pagenumber=2 443 - 192.168.100.31 HTTP/1.1 Mozilla/5.0+(Windows+NT+10.0;+Win64;+x64;+rv:47.0)+Gecko/20100101+Firefox/47.0 https://domain.com/test/char%C3%A6foobar domain.com 200 0 0 5493 559 515
  </code></pre>
  
  <p>With this pattern:</p>
  
  <pre><code>%{TIMESTAMP_ISO8601:logTimestamp} %{NOTSPACE:server} %{IP:serverIp} %{WORD:method} %{URIPATHPARAM:page} %{NOTSPACE:querystring} %{NUMBER:port} %{NOTSPACE:username} %{IP:clientIp} %{NOTSPACE:httpVersion} %{NOTSPACE:useragent} %{NOTSPACE:referer} %{NOTSPACE:siteDomain} %{NUMBER:status} %{NUMBER:substatus} %{NUMBER:win32Status} %{NUMBER:bytesSent:int} %{NUMBER:bytesReceived:int} %{NUMBER:timetaken:int}
  </code></pre>
  
  <p>I've been debugging with this tool: <a href="http://grokconstructor.appspot.com/" rel="nofollow">http://grokconstructor.appspot.com/</a> and it seems to choke on the æ character in the message.</p>
  
  <p>I'm using the Filebeat log shipper with the encoding set to UTF-8, and IIS outputs logs in UTF-8 as well. It ships directly to Logstash.</p>
  
  <p>Any ideas?</p>