Hi community,
What it is better for performance, pipeline or Grok?
I would know the best way for parser. I’ve seen that pipeline is better than grok parser for performance …is It true?
Thank you!
GROK is always inside of a processing pipeline or extractor.
So you might mean extractor over pipeline? For the flexibility I would always use the pipelines.
Great, i mean that. Thank very much!