Skip to content

Track 3 Operators

Abstract

This track explains the concept of punch language operators.

Grok

Info

Refer to the punch grok programming guide

Question

Can you estimate the CPU cost of your grok pattern ?

Question

Do you see some danger using grok patterns ?

Dissect

Refer to the punch dissect programming guide

Question

is dissect better than grok ? If yes why ?

Kv

The key value operator is extremally common. Many log format use some sort of key-value encoding.

Refer to the punch javadocs. In there navigate to the Kv operator.

Csv

The csv operator is also extremally common. Many log format use some sort of delimiter between values.

Refer to the punch javadocs. In there navigate to the CsvOperator.

Date

The date operator lets you generate or convert dates using powerful ISO formatting standard scheme. Check it out in the punch javadocs.

Other Operators

Make sure you are familiar with the many additional operators described in the javadocs.