add testcase for grok command with email