Skip to content

Instantly share code, notes, and snippets.

@Dolbager
Created August 10, 2016 14:39
Show Gist options
  • Save Dolbager/c4dd429014e901d17639c5798cbe4d32 to your computer and use it in GitHub Desktop.
Save Dolbager/c4dd429014e901d17639c5798cbe4d32 to your computer and use it in GitHub Desktop.
GROK for nginx timelog format
(%{NUMBER:upresp_time}|-) %{NUMBER:req_time} \"(%{IPV4:upstr_addr}:%{NUMBER:port}|%{NOTSPACE:upstr})\" %{IPV4:remote_addr} %{SYSLOG5424SD:date} %{NUMBER:response} %{QS} \"(?:%{WORD:verb}%{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})\" %{NUMBER:req_len}/%{NUMBER:bytes_send} %{QS:refer} %{QS:user_agent} %{IPORHOST:host}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment