unreal4u

filter {
    # Analyze access log
    if [fields][type] == "apache-access" {
        # First part: get every common message
        grok {
            match => { "message" => "^%{IP:[apache2][access][remote_ip]} %{USER:ident} %{USER:auth} \[%{HTTPDATE:timestamp}\] " }
            overwrite => "message"
        }

        # Get the specifics