Spec both s3_access_log and grok + other filters.
Updated configuration (removed sensitive info).