_grokparsefailure but grok debugger looks good

This is the correct line.

          hosts => [ "master1:9200", "master2:9200" ]

Overall the configuration should be ok, because logstash does not fail when it starts and I can see the logs in Kibana.