Parsing error messges from nginx log to stackdriver with google-fluend

Question

We trying to set up alerting by parsing nginx error, and we need only messages with [error] level. ([error] 27720#27720: *29765923 access forbidden by rule, client: bl