title: GROK Parsing with regex
body: <p>I am using the following regexes:</p>
  
  <pre><code>INT (?:[+-]?(?:[0-9]+))
  VALUE ([0-9]+)
  SPACE \s*
  DATA .*?
  USERNAME [a-zA-Z0-9._-]+
  YEAR (?&gt;\d\d){1,2}
  MONTHNUM (?:0?[1-9]|1[0-2])
  MONTHDAY (?:(?:0[1-9])|(?:[12][0-9])|(?:3[01])|[1-9])
  HOUR (?:2[0123]|[01]?[0-9])
  MINUTE (?:[0-5][0-9])
  SECOND (?:(?:[0-5][0-9]|60))
  ISO8601_TIMEZONE (?:Z|[+-]%{HOUR}(?::?%{MINUTE}))
  TIMESTAMP %{YEAR:year}/%{MONTHNUM:monthnum}/%{MONTHDAY:monthday}-%{HOUR:hour}:%{MINUTE:minute}:%{SECOND:second}.%{VALUE:_second}
  MESSAGE %{DATA}ERR_SYSTEM%{DATA}
  PARSE_ERROR %{TIMESTAMP:ts}%{SPACE}%{USERNAME:type1}%{SPACE}%{USERNAME:slave}%{SPACE}%{USERNAME:type2}%{SPACE}[%{USERNAME:fibre1}/USERNAME:fibre2]%{SPACE}%{MESSAGE:message}
  </code></pre>
  
  <p>Now I have to parse this line:</p>
  
  <blockquote>
    <p>2013/05/13-05:19:16.776 INFO   abcd1   gamereporting<br>
    [0000000000000000/00000000000000000000]
    [GameReportingSlaveImpl:0x30bf7699a010].processReport() : Error
    processing report for id=18014398509852207, type=frostbite_m,
    error=ERR_SYSTEM</p>
  </blockquote>
  
  <p>I get the following after the parsing:</p>
  
  <pre><code>type1: INFO
  slave : abcd1
  type2: gamereportin
  </code></pre>
  
  <p>Now type 2 always misses the <em>'g'</em>. Why is it happening?</p>
  
  <p>Could somebody provide the correct regex for the above line?</p>