Managed to solve the problem.
Though not sure exactly what was wrong.
All I had to do was change the :INT in grok pattern to :int . I also had to delete the old indexes.
Now my grok pattern looks like
%{NUMBER:hap_actconn:int}/%{NUMBER:hap_feconn:int}/%{NUMBER:hap_beconn:int}/%{NUMBER:hap_srvconn:int}/%{NUMBER:hap_retries:int}
But I'm having similar problem with my IP: fields. I guess the problem was there earlier but I did not notice the problem in-between the int fields !
If anyone have any suggestions, any help with this would be greatly appreciated.
JC