logstash file for converting multiline mixpanel events into elasticsearch

data.json

{
  event: {
    "name": "event_test",
    "properties": {
      "color": "red",
      "size": "medium",
      "texture": "flannel"
    }
  }
},{
  event: {
    "name": "event_test",
    "properties": {
      "color": "blue",
      "size": "large",
      "texture": "plaid"
    }
  }
}

mixpanel_to_elasticsearch.conf

input {
        file {
                codec => multiline {
                        pattern => "^\{"
                        negate => true
                        what => next
                }
                path => [path_to_json]
                start_position => "beginning"
                sincedb_path => "/dev/null"
        }
}

filter {
        mutate {
                gsub => ["message", "\n", ""]
                remove_field => ["@timestamp", "host", "path", "@version", "tags"]
        }

        if [message] =~ /^{.*}$/ {
                json {source => message}
        }
}

output {
        stdout { codec => rubydebug }
        elasticsearch{
                hosts =>[]
                index => logstash_year_month_date
        }
}