I have log4j messages have been pushed to Nagios using rsyslog with aix 7.2. I want to split the message stop at "at oracle.sql....". I write the grok filter like