Logstash/grok to match only first occurrence and stop parsing repeatedly for same values

7.8.0

Upgrade at least to 7.9.1, or disable the java execution engine.

Tried with the latest 7.13.1. Still same.

hi @Badger

I am trying for another way on this. Instead of using ruby at logstash, we can try to push for painless script to calculate us the durations from kibana.

What do you think?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.