Grok Debugger - hard to find identification string for my difficult example

] has a special meaning in a regexp (it closes a character group) so it needs to be escaped using \. That is not the case for }, which does not need to be escaped.