myproject/ansible/roles/logstash/files/config/nginx_access.conf

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/dispatch.comsunny.com*.access.log"
        start_position => "beginning"
         }   
     }    

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/www.comsunny.com_*.access.log"
        start_position => "beginning"
         }
     }

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/www.*.com.access.log"
        start_position => "beginning"
         }
     }

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/api.comsunny.com_443.access.log"
        start_position => "beginning"
         }
     }

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/internal.comsunny.com_80.access.log"
        start_position => "beginning"
         }
     }

input {
    file {
         type => "nginx_access_log"
        path => "/usr/local/openresty/nginx/logs/uu.taschy.com.access.log"
        start_position => "beginning"
         }
     }


input {
    file {
         type => "backend_log"
        path => "/var/prog/backend/logs/backend.log"
        start_position => "beginning"
         }
     }


filter {
  if [type] == "nginx_access_log" {
    grok {
         patterns_dir => "/opt/logstash/logstash-6.0.0/patterns/nginx"
      match => { "message" => "%{NGINX_ACCESS}" }
         }
                                   }
       }


filter {
  if [type] == "backend_log" {
    grok {
         patterns_dir => "/opt/logstash/logstash-6.0.0/patterns/backend.conf"
      match => { "message" => "%{BACKEND_LOG}" }
         }
                                   }
       }        


output {
  if [type] == "nginx_access_log" {
        elasticsearch {
            hosts => ["10.31.88.120:9200"]
            index => "nginx_access_log-%{+YYYY-MM-dd}"
                      }
                                    }
       }


output {
  if [type] == "backend_log" {
        elasticsearch {
            hosts => ["10.31.88.120:9200"]
            index => "backend_log-%{+YYYY-MM-dd}"
                      }
                                    }
       }