Skip to content

Commit f033662

Browse files
committed
fix grok processor details
1 parent 4fd50d0 commit f033662

File tree

1 file changed

+2
-2
lines changed
  • solutions/observability/streams/management/extract

1 file changed

+2
-2
lines changed

solutions/observability/streams/management/extract/grok.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ If a pattern doesn't match, the grok processor will try the next pattern. If no
1515
To improve pipeline performance, start with the most common patterns first, then add more specific patterns. This reduces the number times the grok processor has to run.
1616
:::
1717

18-
To parse a log message with a dissect processor:
18+
To parse a log message with a grok processor:
1919

2020
1. Set the **Source Field** to the field you want to search for grok matches.
2121
1. Set the patterns you want to use in the **Grok patterns** field. Refer to the [example pattern](#streams-grok-example) for more information on patterns.
@@ -60,6 +60,6 @@ To add a generated grok pattern:
6060

6161
Under the hood, the 100 samples on the right side are grouped into categories of similar messages. For each category, a Grok pattern is generated by sending a few samples to the LLM. Matching patterns are then shown in the UI.
6262

63-
:::{note}
63+
:::{warning}
6464
This can incur additional costs, depending on the LLM connector you are using. Typically a single iteration uses between 1000 and 5000 tokens depending on the number of identified categories and the length of the messages.
6565
:::

0 commit comments

Comments
 (0)