Modifed the filebeat NGINX module, as the access log was extended to include upstream metrics. log_format log_requests ‘$remote_addr – $remote_user [$time_local] “$request” ‘ ‘$status $body_bytes_sent “$http_referer” ‘ ‘”$http_user_agent” ‘ ‘”$host” $SSL_protocol “$SSL_cipher” “$upstream_addr” ‘ ‘rt=$request_time uct=$upstream_connect_time ‘ ‘uht=$upstream_header_time urt=$upstream_response_time’; This is basically the combined log format with the additional metrics of host – server block […]