fluentd config

gistfile1.txt

 <ROOT>
  <source>
    type syslog
    port 5140
    tag system
  </source>
  <match system.*.*>
    type record_reformer
    tag elasticsearch
    facility ${tag_parts[1]}
    severity ${tag_parts[2]}
  </match>
  <match elasticsearch>
    type copy
    <store>
      type stdout
    </store>
    <store>
      type elasticsearch
      host localhost
      port 9200
      include_tag_key true
      tag_key @log_name
      logstash_format true
      flush_interval 10s
    </store>
  </match>
</ROOT>