a logstash filter for puppet run and compile times

logstash filter

  if [program] == "puppetmasterd" {
    grok {   match => [ "message", "Compiled catalog for %{HOSTNAME:puppet_client} in %{NUMBER:puppet_compile:int} seconds" ]
         }
  }
  if [program] == "puppetd" {
    grok {   match => [ "message", "Finished catalog run in %{NUMBER:puppet_runtime:float} seconds" ]
         }
  }