How can ser grok if log have different content from the same equipment?

Then use logstash to test the config, not a site maintained by a third party that does not work like grok.

See here and here.