Grok an Elasticsearch problem

I'm closing this in favour of Grok an Elasticsearch problem