logstash-powerMTA.conf

input {
    beats {
        port => "5044"
    }
}

filter {
    if [message] =~ /^type\,/ {
        drop { }
    }
    csv {
        separator => ","
        columns => ["type","timeLogged","timeQueued","orig","rcpt","orcpt","dsnAction","dsnStatus","dsnDiag","dsnMta","bounceCat","srcType","srcMta","dlvType","dlvSourceIp","dlvDestinationIp","dlvEsmtpAvailable","dlvSize","vmta","jobId","envId,queue","vmtaPool","header_Message-Id"]
    }
    geoip {
        source => "dlvDestinationIp"
    }
    date {
      match => [ "timeLogged", "yyyy-MM-dd HH:mm:ssZ" ]
      target => "@timestamp"
    }

}

output {
  elasticsearch {
    hosts => "localhost:9200"
    manage_template => false
    index => "powermta-%{+YYYY.MM.dd}"
  }
}

lastest powermta with lifetime license key available.
telegram: salimrezabd
telegram: salimrezabd1