MuleSoft ELK Plugin Logstash *.conf File

mule_logstash.conf

input {
        file {
                type => "events"
                path => [ "/usr/local/mule/logs/events.log" ]
                codec => json
        }
        file {
                type => "analytics"
                path => [ "/usr/local/mule/logs/gw-http-events.log" ]
                codec => json
        }
}

filter {
        json {
                source => "message"
        }
        geoip {
                source => "clientIp"
                target => "geoip"
                database => "/etc/logstash/GeoLiteCity.dat"
                add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}"]
                add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}"]
        }
        mutate {
                convert => [ "[geoip][coordinates]", "float"]
        }
        if "_jsonparsefailure" in [tags] {
                mutate {
                        remove_tag => "_jsonparsefailure"
                }
        }
}

output {
        stdout { codec => rubydebug }
        elasticsearch { host => localhost }
}