grok debug

gistfile1.txt

{
  "SYSLOGLINE": [
    [
      "Mar 28 14:14:01 host rgmanager[8180]: [script] Executing /etc/init.d/clvmd status"
    ]
  ],
  "SYSLOGBASE2": [
    [
      "Mar 28 14:14:01 host rgmanager[8180]:"
    ]
  ],
  "timestamp": [
    [
      "Mar 28 14:14:01"
    ]
  ],
  "MONTH": [
    [
      "Mar"
    ]
  ],
  "MONTHDAY": [
    [
      "28",
      null
    ]
  ],
  "TIME": [
    [
      "14:14:01"
    ]
  ],
  "HOUR": [
    [
      "14",
      null,
      null
    ]
  ],
  "MINUTE": [
    [
      "14",
      null,
      null
    ]
  ],
  "SECOND": [
    [
      "01",
      null
    ]
  ],
  "timestamp8601": [
    [
      null
    ]
  ],
  "YEAR": [
    [
      null
    ]
  ],
  "MONTHNUM": [
    [
      null
    ]
  ],
  "ISO8601_TIMEZONE": [
    [
      null
    ]
  ],
  "SYSLOGFACILITY": [
    [
      null
    ]
  ],
  "facility": [
    [
      null
    ]
  ],
  "priority": [
    [
      null
    ]
  ],
  "logsource": [
    [
      "host"
    ]
  ],
  "IPORHOST": [
    [
      "host"
    ]
  ],
  "HOSTNAME": [
    [
      "host"
    ]
  ],
  "IP": [
    [
      null
    ]
  ],
  "IPV6": [
    [
      null
    ]
  ],
  "IPV4": [
    [
      null
    ]
  ],
  "SYSLOGPROG": [
    [
      "rgmanager[8180]"
    ]
  ],
  "program": [
    [
      "rgmanager"
    ]
  ],
  "pid": [
    [
      "8180"
    ]
  ],
  "message": [
    [
      "[script] Executing /etc/init.d/clvmd status"
    ]
  ]
}