| 1 | pattern: | |
| 2 | (?x) |
| 3 | ^(?P<NGINX_TIME_LOCAL>\d{4}/\d{2}/\d{2} \s+ \d{2}:\d{2}:\d{2}) \s+ |
| 4 | \[(?P<NGINX_LOG_LEVEL>\w+)\] \s+ |
| 5 | (?P<NGINX_PID>\d+)\#(?P<NGINX_TID>\d+): \s+ |
| 6 | \*(?P<NGINX_CONNECTION_ID>\d+) \s+ |
| 7 | (?P<MESSAGE>.*) |
| 8 | |
| 9 | prefix: NGINX_ |
| 10 | |
| 11 | inject: |
| 12 | - key: SYSLOG_IDENTIFIER |
| 13 | value: nginx-error |
| 14 | |
| 15 | rewrite: |
| 16 | - key: PRIORITY |
| 17 | match: 'error' |
| 18 | value: 3 |
| 19 | - key: PRIORITY |
| 20 | match: 'warn' |
| 21 | value: 4 |
| 22 | - key: PRIORITY |
| 23 | match: '.*' |
| 24 | value: 6 |