Track 3 Operators¶
This track explains the concept of punch language operators.
Refer to the punch grok programming guide
Can you estimate the CPU cost of your grok pattern ?
Do you see some danger using grok patterns ?
Refer to the punch dissect programming guide
is dissect better than grok ? If yes why ?
The key value operator is extremally common. Many log format use some sort of key-value encoding.
Refer to the punch javadocs. In there navigate to the Kv operator.
The csv operator is also extremally common. Many log format use some sort of delimiter between values.
Refer to the punch javadocs. In there navigate to the CsvOperator.
The date operator lets you generate or convert dates using powerful ISO formatting standard scheme. Check it out in the punch javadocs.
Make sure you are familiar with the many additional operators described in the javadocs.