Graylog Dashboard for Nginx Logs

rpm -ivh filebeat-8.2.0-x86_64.rpm
# ============================== Filebeat inputs ===============================
# Needed for Graylog
fields_under_root: true
fields.collector_node_id: {{ ansible_hostname }}
fields.source: {{ ansible_hostname }}
fields.gl2_source_collector: {{ ansible_hostname }}
# /Needed for Graylog
- /var/log/nginx/*.log
# ------------------------------ Logstash Output -------------------------------
# The Logstash hosts
hosts: ["my-graylog-hostname:5044"]
systemctl start filebeat
systemctl enable filebeat
%{IPORHOST:clientip} %{HTTPDUSER:ident} %{USER:auth} \[%{HTTPDATE:timestamp;date;dd/MMM/yyyy:HH:mm:ss Z}\] "(?:%{WORD:verb} %{NOTSPACE:request}(?: HTTP/%{NUMBER:httpversion})?|%{DATA:rawrequest})" %{NUMBER:response} (?:%{NUMBER:bytes}|-) %{QS:referrer} %{QS:agent} %{QS:forwarder}




A dev, ops, devops, sec. A pragmatic engineer.

Love podcasts or audiobooks? Learn on the go with our new app.

Recommended from Medium

Build native apps with GraalVM

VishwaCTF 2022 — Bet Game <250>

Part V- Custom Middleware In ASP.NET Core Web API using .NET 5

What You Like Doing vs What You’re Good At

Sexography Submission Guidelines

The Adyen way of engineering: Our tech stack is open source or built in-house

Building a business from scratch — day 14


Get the Medium app

A button that says 'Download on the App Store', and if clicked it will lead you to the iOS App store
A button that says 'Get it on, Google Play', and if clicked it will lead you to the Google Play store


A dev, ops, devops, sec. A pragmatic engineer.

More from Medium

Setup MongoDB using docker-compose

How To Deploy Nuxt Js App On Docker Swarm Cluster

Using AWS Cloud9 with Docker to deploy a NGINX static website

Multi-Arch Docker Images with EC