NGINX - restructure logging to match nginx module

Im trying to ingest a custom logformat from nginx

log_format main '$remote_addr - $http_x_forwarded_for - $http_true_client_ip - $remote_user [$time_local] "$host" "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" $request_time';

Can I structure it differntly so the nginx module will ingest the same fields but without modifying the grok pattern?

The NGINX module uses the default logging format of the service. If you want any additional data you probably need to update the pipeline for yourself.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.