We currently can output our logs in a JSON format which gives us the ability to pump that into ELK just fine.
The thing is those logs would be a lot more useful if we were able to inject more context metadata into it, i.e.:
- Request original IP - Request original User Agent - Other request/response miscellaneous headers
This would be appliable to get a dashboard built for Pike rate limiting and it's blocked IPs, or mapping out geolocations based on general requests IPs.