ELK Agent - Parse Custom NGINX Log

Elastic Security Endpoint Security
1

Hello there,

I am using "Custom Log Format" on my NGINX Reverse Proxy server. I want to make a Dashboard for myself, but the logs appear as messages. When I use the common log format instead of Custom, the data appears correctly in the default dashboard. I want to prepare a very detailed and advanced dashboard, but first I need to parse the custom log format. Otherwise, the data is not coming properly. I collect logs with Elastic Agent. I made NGINX and Endpoint Security integration. How can I parse my Custom Log format?

1 Like
2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.