Parse NGINX
A basic NGINX format parser that extracts core fields, removes empty values, and parses the timestamp.
Included Processors
1
Parse with Regex
Parsing out basic NGINX fields with regex.
2
Delete Empty Values
Deleting empty values.
3
Parse Timestamp
Parsing the timestamp into a field.
Example Telemetry
Log
| Name | Before | After |
|---|---|---|
| observed_time | 2026-02-04T14:22:00Z | 2026-02-04T14:22:00Z |
| time | 2026-02-04T14:22:00Z | 2026-01-04T14:22:00Z |
| severity_text | INFO | INFO |
| severity_number | 9 | 9 |
Body
192.168.1.50 - - [04/Jan/2026:14:22:00 +0000] "GET /api/v1/users HTTP/1.1" 200 1234 "https://example.com/dashboard" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36"| http_version | HTTP/1.1 |
| ip | 192.168.1.50 |
| method | GET |
| path | /api/v1/users |
| referrer | https://example.com/dashboard |
| response_size | 1234 |
| status_code | 200 |
| timestamp | 04/Jan/2026:14:22:00 +0000 |
| user_agent | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 |
Resource
| Name | Before | After |
|---|---|---|
| host.name | nginx-prod-01 | nginx-prod-01 |
| service.name | nginx | nginx |