Licson Lee
says to
YSITD
而且Logstash可以作Daemon然後即時把access log寫入ES