Logstash/grok to match only first occurrence and stop parsing repeatedly for same values

@Badger , there’s a similar issue on this post which is solved. Guess this can be tweaked to get time difference between each line of. I can later use metrics in ES/KIBANA to get sum of all durations.

Let me know your thoughts on it.