帮忙看下grok 语句

get请求：
192.168.3.23 | GET /app/images/home/test1.png HTTP/1.1 | - | - | - | 200 | - | 07/Feb/2018:16:34:48 +0800 | - | 9606 | testdo/350 CFNetwork/893.14.2 Darwin/17.3.0 |

POST 请求：
192.168.3.13 | POST /api/test HTTP/1.1 | 3.4.0 | cookie=3333&session=555 | ios | 200 | - | 07/Feb/2018:15:28:39 +0800 | 192.168.2.197:8080 | 83 | testdo/3.4.0 (iPhone; iOS 10.3.3; Scale/2.00) | -

grok语句：
%{IP:remote_ip}|%{WORD:method} |%{DATA:url} HTTP/%{NUMBER:http_version}｜%{DATA:mobile_version}｜%{DATA:param}｜%{DATA:mobile_device}｜%{NUMBER:response_code}｜%{DATA:body1}｜%{HTTPDATE:time}｜%{IP:uip}｜%{NUMBER:[body_sent][bytes]}｜%{DATA:[nginx][access][referrer]}|%{DATA:[nginx][access][agent]} |

匹配后结果：
{
"remote_ip": [
[
"192.168.3.23"
]
],
"IPV6": [
[
null,
null
]
],
"IPV4": [
[
"192.168.3.23",
null
]
],
"method": [
[
null
]
],
"url": [
[
null
]
],
"http_version": [
[
null
]
],
"BASE10NUM": [
[
null,
null,
null
]
],
"mobile_version": [
[
null
]
],
"param": [
[
null
]
],
"mobile_device": [
[
null
]
],
"response_code": [
[
null
]
],
"body1": [
[
null
]
],
"time": [
[
null
]
],
"MONTHDAY": [
[
null
]
],
"MONTH": [
[
null
]
],
"YEAR": [
[
null
]
],
"TIME": [
[
null
]
],
"HOUR": [
[
null
]
],
"MINUTE": [
[
null
]
],
"SECOND": [
[
null
]
],
"INT": [
[
null
]
],
"uip": [
[
null
]
],
"[body_sent][bytes]": [
[
null
]
],
"[nginx][access][referrer]": [
[
null
]
],
"[nginx][access][agent]": [
[
null
]
]
}

为什么不能匹配所有项呢