Is there any performance impact of using single grok with multiple patterns instead of multiple groks with single pattern match?
If any you should see a slight gain in having a single filter, but if it's that important to you you should measure it yourself.