Assertion: grok filter | /r/HasProperty | configured with timeout_scope =event
Facets:
Source sentences:
text: Supported values are "pattern" and "event" When multiple patterns are provided to match , the timeout has historically applied to each pattern, incurring overhead for each and every pattern that is attempted; when the grok filter is configured with timeout_scope => event , the plugin instead enforces a single timeout across all attempted matches on the event, so it can achieve similar safeguard against runaway matchers with significantly less overhead.