else blocks are connected to if conditionals, of which you have none. Try this pattern instead:
grok {
...
}
if "_grokparsefailure" in [tags] {
grok {
...
}
}
...
In other words, try new grok filters until the event gets a _grokparsefailure.