Nginx Plugin

1.Install Vector

Vector is a lightweight log collector that forwards your nginx logs to Spinlink.

curl --proto '=https' --tlsv1.2 -sSfL https://sh.vector.dev | bash

curl -1sLf 'https://repositories.timber.io/public/vector/cfg/setup/bash.deb.sh' | sudo bash
sudo apt-get install -y vector

curl -1sLf 'https://repositories.timber.io/public/vector/cfg/setup/bash.rpm.sh' | sudo bash
sudo yum install -y vector

vector --version

2.Configure Nginx Log Format

Spinlink requires nginx logs in JSON format. Add the following to your nginx.conf inside the http block:

log_format spinlink_json escape=json '{'
    '"time":"$time_iso8601",'
    '"remote_addr":"$remote_addr",'
    '"remote_user":"$remote_user",'
    '"request":"$request",'
    '"status":$status,'
    '"body_bytes_sent":$body_bytes_sent,'
    '"request_time":$request_time,'
    '"http_referrer":"$http_referer",'
    '"http_user_agent":"$http_user_agent",'
    '"http_x_forwarded_for":"$http_x_forwarded_for",'
    '"request_method":"$request_method",'
    '"request_uri":"$request_uri",'
    '"query_string":"$query_string",'
    '"host":"$host"'
'}';

access_log /var/log/nginx/access.json spinlink_json;

sudo nginx -t && sudo systemctl reload nginx

3.Configure Vector

Create the Vector configuration at /etc/vector/vector.toml:

# Spinlink Nginx Log Collector

[sources.nginx_access_logs]
type = "file"
include = ["/var/log/nginx/access.json"]
read_from = "end"

[sources.nginx_error_logs]
type = "file"
include = ["/var/log/nginx/error.log"]
read_from = "end"

[transforms.parse_access_logs]
type = "remap"
inputs = ["nginx_access_logs"]
drop_on_error = true
source = '''
parsed, err = parse_json(.message)
if err != null {
    log("Failed to parse JSON: " + to_string(err), level: "warn")
    abort
}
. = parsed
.log_type = "access"
'''

[transforms.parse_error_logs]
type = "remap"
inputs = ["nginx_error_logs"]
source = '''
.log_type = "error"
.raw_message = .message
'''

[sinks.spinlink]
type = "http"
inputs = ["parse_access_logs", "parse_error_logs"]
uri = "https://api.spinlink.io/api/ingestion/logs/nginx"
encoding.codec = "json"
method = "post"

[sinks.spinlink.request.headers]
X-API-Key = "YOUR_API_KEY_HERE"
Content-Type = "application/json"

4.Start Vector

sudo systemctl enable vector
sudo systemctl start vector
sudo systemctl status vector

You should see Active: active (running) in the output.

1.Install Vector

Open PowerShell as Administrator:

Invoke-WebRequest https://packages.timber.io/vector/0.53.0/vector-x64.msi -OutFile vector-0.53.0-x64.msi
msiexec /i vector-0.53.0-x64.msi

2.Configure Nginx Log Format

Add the same JSON log format to your nginx.conf (typically C:\nginx\conf\nginx.conf):

access_log C:/nginx/logs/access.json spinlink_json;

3.Configure Vector

Create C:\Program Files\Vector\config\vector.yaml:

sources:
  nginx_access_logs:
    type: file
    include:
      - C:\nginx\logs\access.json
    read_from: end

transforms:
  parse_access_logs:
    type: remap
    inputs:
      - nginx_access_logs
    drop_on_error: true
    source: |
      parsed, err = parse_json(.message)
      if err != null {
        abort
      }
      . = parsed
      .log_type = "access"

sinks:
  spinlink:
    type: http
    inputs:
      - parse_access_logs
    uri: https://api.spinlink.io/api/ingestion/logs/nginx
    encoding:
      codec: json
    method: post
    request:
      headers:
        X-API-Key: YOUR_API_KEY_HERE
        Content-Type: application/json

4.Run as Windows Service

Use NSSM to install Vector as a service:

# Download NSSM
Invoke-WebRequest https://nssm.cc/release/nssm-2.24.zip -OutFile nssm.zip
Expand-Archive nssm.zip -DestinationPath C:\nssm

# Install and start service
C:\nssm\nssm-2.24\win64\nssm.exe install Vector "C:\Program Files\Vector\bin\vector.exe" "--config" "C:\Program Files\Vector\config\vector.yaml"
Start-Service Vector