Logstash/grok to match only first occurrence and stop parsing repeatedly for same values

Elastic Stack Logstash
22

7.8.0

23

Upgrade at least to 7.9.1, or disable the java execution engine.

24

Tried with the latest 7.13.1. Still same.

25

hi @Badger

I am trying for another way on this. Instead of using ruby at logstash, we can try to push for painless script to calculate us the durations from kibana.

What do you think?