Old logstash

input {
  gelf {
    type => "message"
    port => 12204
  }
  gelf {
    type => "lb12202"
    port => 12202
  }
  gelf {
    type => "lb12203"
    port => 12203
  }
}

filter {
    if [facility] =~ /^p(gatew|tr)ay$/ {
       mutate {
          rename => [ "@timestamp", "client_timestamp" ]
       }
       ruby {
          code => "event['@timestamp'] = Time.new.utc"
       }
    }
}


output {

  elasticsearch {
    cluster 	=> "prod" 
    protocol   => "http"
    host    => "elasticsearch.endpoint"
    workers => 32
  }
  statsd {
    type => "lb12202" 
    host => "statsd.foo.bar"
    port => 8125
    sender => "i-603c6269" 
    increment => "message.gelf"
  }
  statsd {
    type => "lb12203" 
    host => "statsd.foo.bar"
    port => 8125
    sender => "i-603c6269" 
    increment => "message.gelf"
  }
  statsd {
    type => "message" 
    host => "statsd.foo.bar"
    port => 8125
    sender => "i-603c6269" 
    increment => "message.gelf"
  }
}