gistfile1.txt

access.format = "[%{%Y-%m-%dT%H:%M:%S%z}t] requestid:%{REQUEST_ID}e frontendip:%R frontendhost:%{SERVER_HOSTNAME}e host:%{HTTP_HOST}e clientip:%{REAL_IP}e https:%{HTTPS}e verb:%m response:%s fpm_pool:%n request:\"%{REQUEST_URI}e%Q%q\" script_filename:%f php_process_time:%{micro}d php_process_bytes:%{bytes}M php_cpu_user:%{user}C%% php_cpu_system:%{system}C%% php_cpu_total:%{total}C%%"

logstash

log_format logstash '$host $hostname "$http_x_forwarded_for" "$content_type" $pipe $remote_addr - $remote_user [$time_iso8601] "$request" '
                      '$status $body_bytes_sent "$http_referer" '
                      '"$http_user_agent" '
                      'upstream $upstream_addr upstream_time $upstream_response_time request_time $request_time '
                      '$request_id';