@type regexp expression /(?<month>[^ ]*) (?<data>[^ ]*) (?<time>[^ ]*) (?<remote_host>[^ ]*) (?<nginx_tag>[^ ]*) (?<user_ip>[^ ]*) - - \[(?<nginx_time>[^ ]* [^ ]*)\] "(?<request>[^ ]* [^ ]* [^ ]*)" (?<responce_code>[^ ]*) (?<body_bytes_sent>[^ ]*) "(?<http_referer>[^ ]*)"/