Simplistic grok filter for parsing naxsi errors from nginx logs

gistfile1.rb

grok {
  type => "nginx_error"
  match => ["message", "ip=%{IP:client_ip}&server=%{IP:server_ip}&uri=%{PATH:uri}&total_processed=%{NUMBER:total_processed}&total_blocked=%{NUMBER:total_blocked}&zone0=%{WORD:zone}&id0=%{NUMBER:id}"]
}