Thank you Toby,
Setting the expected values works great. the "UNKNOWN" are gone and only "NONE" are left.
Where can I find documentation on similar features than "expectedValues"?
My current configuration is
[%d{yyyy.MM.dd-HH.mm.ss:fff}][%3t]%c: %p{-expectedValues:VeryVerbose,Verbose,Display,Warning,Error}: %m%n
[%d{yyyy.MM.dd-HH.mm.ss:fff}][%3t]%c: %m%n
%c: %p{-expectedValues:VeryVerbose,Verbose,Display,Warning,Error}: %m%n
%m, %d{MM/dd/yy HH:mm:ss}%n
There are still some lines not parsed as single log line. They are minor logs but I am going to refine the patterns.
A follow up question if I want to add pattern like
%c: %m%n
How can I make sure it ignore the log lines starting with whitespaces?