Troubles with apache rewrite log grok

Elastic Stack Logstash
2

That suggests that [type] does not match "apache_rewrite". If it did match and then the grok executed successfully then you would not have a field called message.

A configuration like this

input { generator { count => 1 lines => [ '10.127.33.37 - - [31/May/2019:03:26:02 +0000] [10.127.3.49/sid#7f7e75105ad8][rid#7f7e38002978/initial] (1) pass through /server-status' ] } }
filter {
    grok {
        match => { "message" => "%{IPORHOST:client_ip} %{USER} %{USER:http_user} \[%{HTTPDATE}\] %{SYSLOG5424SD}%{SYSLOG5424SD} \(%{NOTSPACE:loglevel}\) %{GREEDYDATA:message}" }
        remove_field => ["message"]
    }
}
output { stdout { codec => rubydebug { metadata => false } } }

results in

{
      "host" => "example.com",
 "client_ip" => "10.127.33.37",
  "loglevel" => "1",
 "http_user" => "-",
"@timestamp" => 2019-06-04T19:02:27.541Z,
  "@version" => "1",
  "sequence" => 0
}