# Nginx content pack

**URL:** <https://community.graylog.org/t/nginx-content-pack/20986>\
**Category:** Graylog Central (peer support)\
**Created:** [August 24, 2021, 10:43pm UTC](https://community.graylog.org/t/nginx-content-pack/20986 "2021-08-24T22:43:17Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Raynu](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@Raynu](https://community.graylog.org/u/Raynu)\
**Post date:** [August 24, 2021, 10:43pm UTC](https://community.graylog.org/t/nginx-content-pack/20986/1 "2021-08-24T22:43:17Z")

</div>

Hello  
Could someone please advise me on what version of Nginx content pack to use for Graylog 4.0. I am not using docker for Nginx.

Updated for Graylog 3.0+ NGINX JSON Content Pack link on Graylog Market Place seems to be broken.

Can I use the one available with docker and skip the docker part of the configuration?

Thanks

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [August 25, 2021, 1:05am UTC](https://community.graylog.org/t/nginx-content-pack/20986/2 "2021-08-25T01:05:12Z")

</div>

Hello,

I just check the Market and did not see anything that was compatible with Version 4.0. There were some changes from version 3.3 to 4.0 they may have broken that content pack.

> [@Raynu](#):
>
> Can I use the one available with docker and skip the docker part of the configuration?

I’m not sure Docker works like that, but creating your own Content pack for Nginx is possible.

---

<div class="post-metadata">

**Author:** ![Raynu](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@Raynu](https://community.graylog.org/u/Raynu)\
**Post date:** [August 25, 2021, 1:17am UTC](https://community.graylog.org/t/nginx-content-pack/20986/3 "2021-08-25T01:17:27Z")

</div>

@gsmith Thanks for your reply. Could you please show me any example? I have no idea how to create content packs.

---

<div class="post-metadata">

**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\
**Post date:** [August 25, 2021, 1:32am UTC](https://community.graylog.org/t/nginx-content-pack/20986/4 "2021-08-25T01:32:37Z")

</div>

> [@Raynu](#):
>
> Could you please show me any example?

absolutely,

[How do I create a Content Pack](https://docs.graylog.org/en/4.1/pages/content_packs.html#how-do-i-create-a-content-pack)

---

<div class="post-metadata">

**Author:** ![Raynu](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@Raynu](https://community.graylog.org/u/Raynu)\
**Post date:** [August 25, 2021, 5:37am UTC](https://community.graylog.org/t/nginx-content-pack/20986/5 "2021-08-25T05:37:34Z")

</div>

> [@gsmith](#):
>
> ker works like that, but creating your own Content pa

Thanks, that will need some brainstorming. Sad that there is no updated versions available in Graylog marketplace.

Would anyone have any idea if they will be fixing the issues in existing ones?

---

<div class="post-metadata">

**Author:** ![aaronsachs](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/aaronsachs/32/7180_2.png) [@aaronsachs](https://community.graylog.org/u/aaronsachs)\
**Post date:** [August 25, 2021, 11:32am UTC](https://community.graylog.org/t/nginx-content-pack/20986/6 "2021-08-25T11:32:52Z")

</div>

Can you link to the content pack you’re referring to please? If it’s a community content pack (e.g., not maintained by Graylog) then you’ll need to reach out to the maintainer to see if they plan on supporting 4.0.

---

<div class="post-metadata">

**Author:** ![Raynu](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@Raynu](https://community.graylog.org/u/Raynu)\
**Post date:** [August 26, 2021, 5:56am UTC](https://community.graylog.org/t/nginx-content-pack/20986/7 "2021-08-26T05:56:36Z")

</div>

> **[GitHub - id2s/graylog-contentpack-nginx: A nginx content pack for Graylog](https://github.com/id2s/graylog-contentpack-nginx)**
>
> A nginx content pack for Graylog. Contribute to id2s/graylog-contentpack-nginx development by creating an account on GitHub.

> **[Graylog](https://marketplace.graylog.org/addons/f438c100-32ac-434d-960a-c28b388c12b6)**
>
> Graylog

---

<div class="post-metadata">

**Author:** ![Raynu](https://avatars.discourse-cdn.com/v4/letter/r/a9adbd/32.png) [@Raynu](https://community.graylog.org/u/Raynu)\
**Post date:** [August 26, 2021, 6:11am UTC](https://community.graylog.org/t/nginx-content-pack/20986/8 "2021-08-26T06:11:06Z")

</div>

> **[Graylog](https://marketplace.graylog.org/addons/f438c100-32ac-434d-960a-c28b388c12b6)**
>
> Graylog

I am able to install the content pack from the above link. The inputs looks like below:

 ![image](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/2X/b/bbb95d9bc75a9e459cc244c6c0dcc4d050f68046.png)

The only concern I am having right now is those highlighted values showing static fields. I am going to tell my IT team to send logs now. Will see if it is working as expected.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 9, 2021, 6:11am UTC](https://community.graylog.org/t/nginx-content-pack/20986/9 "2021-09-09T06:11:24Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.
