log_format json '{"dtTime":"$time_iso8601",'
                   '"logLevel":"INFO",'
                   '"className":"$uri",'
                   '"content":"requestParam=>$query_string \n status=>$status \n size=>$body_bytes_sent \n request_time=>$request_time",'
                   '"serverName":"$server_addr",'
                   '"traceId":"$remote_addr",'
                   '"method":"$http_user_agent",'
                   '"appName":"nginx"'
                   '}';
       access_log  /var/log/nginx/access.log  json;

    wget https://artifacts.elastic.co/downloads/logstash/logstash-6.6.0.tar.gz

    tar –zxvf logstash-6.6.0.tar.gz

    mv logstash-6.6.0 logstash

     mkdir nginx-log
     cd nginx-log
     vim logstash.conf

     input {
        file {
                path => "/var/log/nginx/access.log" #这边和上面nginx的日志输出地址一致
                type => "nginx_log"
                start_position => "beginning"
                stat_interval => "2"
        }
     filter {
         json {
               source=> "message"
           }
         date {
               match => ["dtTime", "ISO8601"]
              }
         ruby{
               code => "event.set('dtTime',(event.get('@timestamp').to_f.round(3)*1000).to_i)"
             }
         mutate {
               remove_field => ["message"]
             }
       }
      output {
         if[type] =="nginx_log"{
                redis {
                        data_type => "list" #这个不用改
                        host => "10.100.2.54" #plumelog的queue.redis地址
                        db => "0" #plumelog的queue.redis DB
                        port => "6379" #plumelog.queue.redis的端口
                        password => "plumelogredis" #plumelog.queue.redis的密码
                        key => "plume_log_list" #这个不用改
                }
        }
      }

    ./logstash -f ../nginx-log/logstash.conf