What's confusing? I suppose that you could leverage osquery, but it's a little more tuned towards collecting state and artifacts from the OS, as opposed to parsing application specific logs. You could (it may already have been done) write an osquery extension to parse out the nginx logs, but then as was mentioned it might be better to just use something like logstash to forward the data off