logstash.config

input {
  tcp {
    codec => json_lines {
      charset => "UTF-8"
    }
    port => 3000
  }
}

filter {
  date {
    match => [ "datetime", "MMM d kk:mm:ss.SSS", "UNIX" ]
    remove_field => "datetime"
  }
  multiline {
    pattern => "^\s"
    what => "previous"
  }
}

output {
  stdout {
    codec => rubydebug
  }

  elasticsearch_http {
    host => "192.168.0.153"
    port => "9200"
  }
}