nginx

input {
  file {
    path => "/var/log/nginx/access_log"
    charset => "UTF-8"
    type => "access_log"
  }
}

output

output {
  redis { host => "XXXX" data_type => "list" key => "logstash" }
}

syslog

input {
  file {
    path => "/var/log/messages"
    charset => "UTF-8"
    type => "syslog"
  }
}

filter {
  grok {
    type => "syslog"
    pattern => [ "%{SYSLOGLINE}" ]
  }
  date {
    type => "syslog"
    match => [ "timestamp", "MMM  d HH:mm:ss", "MMM dd HH:mm:ss" ]
  }
  mutate {
    type => "syslog"
    exclude_tags => "_grokparsefailure"
    replace => [ "@message", "%{message}" ]
  }
  mutate {
    type => "syslog"
    remove => [ "message", "logsource", "timestamp" ]
  }
}