[INPUT]
    Name          systemd
    Tag           host.*
    Systemd_Filter _SYSTEMD_UNIT=sshd.service

[INPUT]
    Name          tail
    Tag           app.*
    Path          /var/log/secure

[OUTPUT]
    Name          http
    Match         *
    Host          your-nexus-domain
    Port          443
    URI           /api/ingest/syslog
    Header        Authorization Bearer <your-forwarder-token>
    Format        json
    tls           On
    tls.verify    On