We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 8ea181d commit b6cc324Copy full SHA for b6cc324
plugins/parsers/grok/README.md
@@ -220,4 +220,14 @@ the file output will only print once per `flush_interval`.
220
- If successful, add the next token, update the pattern and retest.
221
- Continue one token at a time until the entire line is successfully parsed.
222
223
+#### Performance
224
225
+Performance depends heavily on the regular expressions that you use, but there
226
+are a few techniques that can help:
227
+
228
+- Avoid using patterns such as `%{DATA}` that will always match.
229
+- If possible, add `^` and `$` anchors to your pattern:
230
+ ```
231
+ [[inputs.file]]
232
+ grok_patterns = ["^%{COMBINED_LOG_FORMAT}$"]
233
0 commit comments