{"action":"created","issue":{"url":"https://api.github.com/repos/elastic/logstash/issues/3094","labels_url":"https://api.github.com/repos/elastic/logstash/issues/3094/labels{/name}","comments_url":"https://api.github.com/repos/elastic/logstash/issues/3094/comments","events_url":"https://api.github.com/repos/elastic/logstash/issues/3094/events","html_url":"https://github.com/elastic/logstash/issues/3094","id":70374069,"number":3094,"title":"Logstash significantly slows down with longer grok pattern","user":{"login":"rakesh91","id":1933540,"avatar_url":"https://avatars.githubusercontent.com/u/1933540?v=3","gravatar_id":"","url":"https://api.github.com/users/rakesh91","html_url":"https://github.com/rakesh91","followers_url":"https://api.github.com/users/rakesh91/followers","following_url":"https://api.github.com/users/rakesh91/following{/other_user}","gists_url":"https://api.github.com/users/rakesh91/gists{/gist_id}","starred_url":"https://api.github.com/users/rakesh91/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rakesh91/subscriptions","organizations_url":"https://api.github.com/users/rakesh91/orgs","repos_url":"https://api.github.com/users/rakesh91/repos","events_url":"https://api.github.com/users/rakesh91/events{/privacy}","received_events_url":"https://api.github.com/users/rakesh91/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-04-23T10:37:07Z","updated_at":"2015-04-23T12:52:20Z","closed_at":null,"body":"Hi,\r\nI have been using logstash to parse my logs, lately I wanted to add few more fields to my logs. After updating my grok patterns for it logstash has significantly reduced its speed. I was getting around 3k output before the new pattern, now around 200 to 300. \r\n\r\nI had around 20 fields back then, I increased 6 more.\r\nWhat is the reason for this sudden performance degrade?"},"comment":{"url":"https://api.github.com/repos/elastic/logstash/issues/comments/95575588","html_url":"https://github.com/elastic/logstash/issues/3094#issuecomment-95575588","issue_url":"https://api.github.com/repos/elastic/logstash/issues/3094","id":95575588,"user":{"login":"rakesh91","id":1933540,"avatar_url":"https://avatars.githubusercontent.com/u/1933540?v=3","gravatar_id":"","url":"https://api.github.com/users/rakesh91","html_url":"https://github.com/rakesh91","followers_url":"https://api.github.com/users/rakesh91/followers","following_url":"https://api.github.com/users/rakesh91/following{/other_user}","gists_url":"https://api.github.com/users/rakesh91/gists{/gist_id}","starred_url":"https://api.github.com/users/rakesh91/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rakesh91/subscriptions","organizations_url":"https://api.github.com/users/rakesh91/orgs","repos_url":"https://api.github.com/users/rakesh91/repos","events_url":"https://api.github.com/users/rakesh91/events{/privacy}","received_events_url":"https://api.github.com/users/rakesh91/received_events","type":"User","site_admin":false},"created_at":"2015-04-23T12:52:20Z","updated_at":"2015-04-23T12:52:20Z","body":"Thanks a lot. Will try it out."}}