How to define a proper grok pattern for php error logs

You cannot use WORD which is \b\w+\b, because "Fatal error". You should use %{DATA:log_level}, it works for me.