Nginx fields

Module for parsing the Nginx log files.

nginx

Fields from the Nginx log files.

access

Contains fields for the Nginx access logs.

nginx.access.remote_ip_list

An array of remote IP addresses. It is a list because it is common to include, besides the client IP address, IP addresses from headers like X-Forwarded-For. Real source IP is restored to source.ip.

type: array

nginx.access.body_sent.bytes

type: alias

alias to: http.response.body.bytes

nginx.access.user_name

type: alias

alias to: user.name

nginx.access.method

type: alias

alias to: http.request.method

nginx.access.url

type: alias

alias to: url.original

nginx.access.http_version

type: alias

alias to: http.version

nginx.access.response_code

type: alias

alias to: http.response.status_code

nginx.access.referrer

type: alias

alias to: http.request.referrer

nginx.access.agent

type: alias

alias to: user_agent.original

nginx.access.user_agent.device

type: alias

alias to: user_agent.device.name

nginx.access.user_agent.name

type: alias

alias to: user_agent.name

nginx.access.user_agent.os

type: alias

alias to: user_agent.os.full_name

nginx.access.user_agent.os_name

type: alias

alias to: user_agent.os.name

nginx.access.user_agent.original

type: alias

alias to: user_agent.original

nginx.access.geoip.continent_name

type: alias

alias to: source.geo.continent_name

nginx.access.geoip.country_iso_code

type: alias

alias to: source.geo.country_iso_code

nginx.access.geoip.location

type: alias

alias to: source.geo.location

nginx.access.geoip.region_name

type: alias

alias to: source.geo.region_name

nginx.access.geoip.city_name

type: alias

alias to: source.geo.city_name

nginx.access.geoip.region_iso_code

type: alias

alias to: source.geo.region_iso_code

error

Contains fields for the Nginx error logs.

nginx.error.connection_id

Connection identifier.

type: long

nginx.error.level

type: alias

alias to: log.level

nginx.error.pid

type: alias

alias to: process.pid

nginx.error.tid

type: alias

alias to: process.thread.id

nginx.error.message

type: alias

alias to: message