Nginx: Cookieから特定のデータだけログ出力したい

ログ量かなり増えそう

xxx.xxx.36.106 - - [21/Oct/2019:16:30:58 +0900] "GET / HTTP/1.1" 200 14828 "https://hoge-hogeo.com/search/hoge/fuga" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" cookie[_ga=GA1.2.xxxxxxxxx.xxxxxxxxxx; _fbp=fb.1.xxxxxxxxx.xxxxxxxxx; _gcl_au=1.1.xxxxxxxxx.xxxxxxxxx; _gcl_aw=GCL.xxxxxxxxx.EAxxxxxxxxxKm8_3xxxxxxxxxEAAxxxxxxxxxE; _gac_UA-xxxxxxxxx-32=1.1xxxxxxxxx.xxxxxxxxx; _ga=GA1.3xxxxxxxxx; USER_TYPE=0; login=0&xxxxxxxxx; _session_id=e86d040431736e4ffac39d9e8cc9858e; _gid=GA1.2.xxxxxxxxx.xxxxxxxxx; __juicer_sesid_9i3nsdfP_=1xxxxxxxxx-xxxxxxxxx5; __juicer_session_referrer_9i3nsdfP_=xxxxxxxxx-83c4-xxxxxxxxx___https%253A%252F%252Fhoge-hogeo.com%252Fsearch%253Fhoge%253Dfuga%2526order_type%253D0; _dc_gtm_UA-xxxxxxxxx=1; _td_global=xxxxxxxxx-xxxxxxxxx; __juicer_sesid_9i3nsdfP_=xxxxxxxxx-xxxxxxxxx-xxxx-xxxxxxxxx; ___o2u_o2id=xxxxxxxxx-xxxxxxxxx; _gid=GA1.3.xxxxxxxxx.xxxxxxxxx; _gat_UA-xxxxxxxxx=1; __juicer_session_referrer_9i3nsdfP_=xxxxxxxxx-xxxxxxxxx-xxxxxxxxx___https%253A%252F%252Fhoge-hogeo.com%252F; _td=xxxxxxxxx-axxxxxxxxx]

配列っぽいから、特定のデータだけ取り出せないかな。

session_idだけ出してみる。

  log_format frima '$remote_addr - $remote_user [$time_local] "$request" '
                  '$status $body_bytes_sent "$http_referer" '
                  '"$http_user_agent" "$cookie_session_id"';

でない

xxx.xxx.36.106 - - [23/Oct/2019:15:19:38 +0900] "GET /images/hoge/fuga/icon_hoge.svg HTTP/1.1" 200 1279 "https://hoge-hogeo.com/search/hoge/fuga "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" "-"

もしかして_(アンスコ)二つ？？？

  log_format frima '$remote_addr - $remote_user [$time_local] "$request" '
                  '$status $body_bytes_sent "$http_referer" '
                  '"$http_user_agent" "$cookie__session_id"';

でた

xxx.xxx.36.106 - - [23/Oct/2019:15:20:56 +0900] "GET /images/hoge/fuga/icon_hoge.svg HTTP/1.1" 200 1279 "https://hoge-hogeo.com/search/hoge/fuga "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/77.0.3865.120 Safari/537.36" "cd15992f3578db3a5217d78198028ae4"

これでNginxのログとRailsのログを突合できそう。