gistfile1.txt

filter {
  if [type] == "nginx_access" {
    clone { clones => [ "nginx_mini" ] }
  }
  
  if [type] == "nginx_mini" {
    # Nothing ever gets here!
    mutate { add_tag => "test" }
    prune { whitelist_names => [ "agent", "clientip", "timestamp" ] }
  }
}
output {
  if [type] == "nginx_mini" {
    sqs { ... }
  }
}