logstash获取nginx日志分析

input {
    redis {
        host => "10.0.20.120"
        port => "6379"
        key => "nginx_log"
        data_type => "list"
        threads => "2"
        db => "0"
        type => "nginx_log"
    }
}
filter {
    grok {
        match => {"message" => "%{IPORHOST:clientip} \[%{HTTPDATE:timestap}\] %{WORD:http_methed} %{NOTSPACE:request} %{NOTSPACE:request_query} %{NUMBER:status_code} %{NUMBER:bytes} %{NOTSPACE:referer} %{QS:user_agent}"}
    }
    mutate {
        convert => ["bytes", "integer", "status_code", "integer"]
    }
    geoip {
        source => "clientip"
    }
}
output {
    elasticsearch {
        hosts => ["10.0.20.122:9200"]
        index => "test5-%{+YYYY.MM.dd}"
    }
}