grok -> pattern needed a starting doublequote