Hello @ne20002 ,
It is not really optimal, but currently the only way to make this work is to have this in your acquis.yaml file:
filenames:
- /var/log/nginx/*.log
labels:
type: nginx
----
filenames:
- /var/log/nginx/error.log
labels:
type: modsecurity