Strang things happened when logstash grok the log message

Do we presume you are using the Filebeat config from here