Referrer Inconsistencies

[cjs6891]

I'm using logstash to ingest nginx logs and have found inconsistencies with the referrer field. For example, a google referrer is correct while other referrers aren't

NGINX Log Format:
log_format main_ext '$remote_addr - $remote_user [$time_local] "$request" '
'$status $body_bytes_sent "$http_referer" '
'"$http_user_agent" "$http_x_forwarded_for" '
'rt=$request_time ua="$upstream_addr" '
'us="$upstream_status" ut="$upstream_response_time" '
'ul="$upstream_response_length" '
'cs=$upstream_cache_status' ;

any help, suggestions, or direction would be appreciated

[magnusbaeck (Magnus Bäck)]

I think you have to explain in greater detail what is wrong. What does an event currently look like? What did you expect it to look like? Et cetera.

[cjs6891]

@magnusbaeck it was a searching error on my part, thx for responding