Thank you Anas for your feedback. Yes, i use to make the groks extratores bye myself, is safer that way.
About my problem, I’ve allready resolve my problem. It was some miss configuration on plugins configuration. I accidentally turned off one plugin and graylog stoped to use the groks extrators and bypass them.
Bests
Patrick