es navi map+++++++nginx logs-parser

http://www.cnblogs.com/ahaii/p/7410421.html

 

[2017-12-17T00:01:03+08:00]

["GET /user/comm/login?school_id= HTTP/1.1" 302 0 0.005] ["https://u.unipus.cn/index.html/?logout=true" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0.2883.87 UBrowser/6.2.3831.602 Safari/537.36"]

\[ %{TIMESTAMP_ISO8601:request_time} \] \[ %{IP:client11} \* %{IP:client12}:%{NUMBER:port12} \* ((%{IP:client13}:%{NUMBER:port13})|(-))? ] \[ %{IP:client21}:%{NUMBER:port21} \* %{IP:client22}:%{NUMBER:port22} \] \[ \"%{WORD:method} (?:%{URIPATH:baseurl}(\?%{DATA:params})?) (HTTP/%{NUMBER:http_version})\" %{NUMBER:http_status} %{NUMBER:bytes} %{NUMBER:duration}\ ] \[ \"%{GREEDYDATA:refer}\" \"%{GREEDYDATA:agent}\" \] \[ (\\x22%{DATA:Nguserid}\\x22)? \]