can I concatenate method and path together to copy into a new one? or am I better making a custom parser that copies it?

Maybe you can use a Lua script ?

While it's not ideal I just used the path as short message key. Turned out that once I'd added the correct graylog GIM field it processed the whole record correctly. Overrode the default nginx access log parser to use the graylog preferred key names