Can we have a regex to only get 2 or 3 level deep urls from a nginx logs, before passing them on

[warkolm (Mark Walkom)]

This looks related to How to define custom grock to get only 3 levels deep url

Given you need to do this with grok I will close this one. In future it'd be great if you can just ask in one place