nginx.conf & nginx.pattern

examplelog.txt

93.87.248.208 - - [17/Mar/2018:21:05:19 +0300] "GET /wp-admin HTTP/1.1" 200 5015 0.738 0.738 ."-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/5350 (KHTML, like Gecko) Chrome/13.0.829.0 Safari/5350" "-"

nginx.conf

input {
    file {
        path =>"/Users/kerem/Desktop/ElasticStackOrnekCalisanSistemler/NginxLive/logs.log"
        start_position => "beginning"
    }
}

filter {
    grok {
        match => { "message" => "%{NGINX}" }
    }
    date {
        match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
    }
    geoip {
        source => "clientip"
        target => "geoip"
  }

    useragent {
        source => "agent"
        target => "user_agent"
  }
}

output {
    elasticsearch { 
	      hosts => ["localhost:9200"]
        index => "nginxlive"
        document_type => "logs"
    }
}

nginx.pattern

NGINX %{IPORHOST:clientip} - - \[%{HTTPDATE:timestamp}] \"(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|-)\" %{NUMBER:status_code} (?:%{NUMBER:bytes}|-) %{NUMBER:request_time} %{NUMBER:upstream_response_time} %{NOTSPACE:referer} %{QS:agent} %{QS:zipcode}