Hi can I find out what my options are if my nginx logs are not in the default format? I could send the logs from filebeat to logstash and have logstash parse the message there but wasn't sure if that was the right solution. Thank you in advance!
Apart from doing the parsing in Logstash, it is possible to add further Grok patterns in module/nginx/access/ingest/pipeline.json or module/nginx/error/ingest/pipeline.json. After you added the sufficient patterns, load it using Filebeat.
Awesome. Thank you so much!
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.