grok lockup reproduce-by

input line

10.14.205.18 load-sync20.services.mozilla.com cuser291808 [06/Mar/2012:16:52:07 -0800] "GET /1.0/cuser291808/info/collections HTTP/1.1" 503 222 "-" "RPT-HTTPClient/0.3-3E" "-" "ssl: SSL_RSA_WITH_RC4_128_SHA, version=TLSv1, bits=128" node_s:- req_s:0.041069 retries:0 req_b:218 "c_l:-"

logstash config

input {
    stdin { type => "zeus" }
}

filter {
    grok {
        type => "zeus"
        pattern => "%{IP:ip} %{HOST:host} %{USER:user} \[%{HTTPDATE:timestamp}\] \"%{WORD:verb} %{URIPATHPARAM:request} HTTP/%{NUMBER:httpversion}\" %{NUMBER:response} (?:%{NUMBER:bytes}|-) \"(?:%{URI:referrer}|-)\" %{QS:agent} %{QS:cookie} %{QS:ssl} node_s:%{NUMBER:node_time} req_s:%{NUMBER:req_time} retries:%{NUMBER:retries}"
        named_captures_only => true
    }
}

output {
    stdout { }
}