_grokparsefailure but grok debugger looks good

Maybe it's because of INTERFACE
\d is for found digit, so INTERFACE search multiple group of 4 digit seperated by slash.

In your case, INTERFACE have to take 3digit and un number all seperated by a slash.

So INTERFACE need to be declared like this
INTERFACE \d/\d/\d/[\d]+