Hey guys, need some help with grok, kind of at a loss. I've used Logstash quite a bit in the past, never run into this issue. On Logstash v2.2.2, I can't seem to get grok to parse some logs from Nginx. They have some custom fields added, but as mentioned in the title, the pattern I have works fine in https://grokdebug.herokuapp.com/.
Here is a sample message and my logstash config: