updated config; fixed grok pattern