Logstash grok match pattern for message field