cat /etc/rsyslog.d/nginx.conf

$ModLoad imfile

# Default Apache Error Log
$InputFileName /var/log/nginx/error.log
$InputFileTag nginx-error-default:
$InputFileStateFile stat-nginx-error
$InputFileSeverity info
$InputFileFacility local3
$InputRunFileMonitor

# Default Apache Access Log
$InputFileName /var/log/nginx/access.log
$InputFileTag nginx-access:
$InputFileStateFile stat-nginx-access
$InputFileSeverity info
$InputFileFacility local4
$InputRunFileMonitor

$InputFilePollInterval 10

local3.* @@elk.infra:5000
local4.* @@elk.infra:5000