Update grok-patterns

We use Kerberos for authentification. so usernames are looking like kerberos principals
name@domain.org
I put "(?:@%{HOSTNAME})?" after "%{USER:auth}"