ingest.sh

#!/bin/sh                                                                       
                                                                                   
curl -X PUT "http://localhost:9200/graylog_0" -H "Content-Type: application/json" -d'{  "mappings": {    "properties": {                                                                   "timestamp": {
        "type": "date",                                                         
        "format": "yyyy-MM-dd HH:mm:ss.SSS"                                     
      },                                                                        
        "http_method": { "type": "keyword" }                                    
    }                                                                           
  }                                                                             
}'                                                                              
                                                                                
jq -c '.documents[].document[] | select(.data != null) | .data' random-http-logs.json|while read -r data; do curl -XPOST -H 'Content-Type: application/json' -d "$data" http://localhost:9200/graylog_0/_doc; done