filebeat.latency.yml

filebeat:
  spool_size: 4096
  prospectors:
    -
      paths:
        - /tmp/multi*
      input_type: log
      document_type: diffusion
  registry_file: /tmp/test_registry
output:
  logstash:
    hosts: ["localhost:5555"]
    worker: 4
    bulk_max_size: 4096
    loadbalance: true
shipper:
logging:
  level: debug
  files:
    rotateeverybytes: 10485760
    keepfiles: 3

latency_beats.conf

input {
  beats {
   port => 5555
  }

}

filter {
     metrics {
          meter => "events"
          add_tag => "metric"
        }
}

output {

    if "metric" in [tags] {
        stdout {
          codec => line {
            format => "rate: %{[events][rate_1m]}"
          }
     }
 }

}

latency_lumberjack.conf

input {
   lumberjack {
   port => 6782
   ssl_certificate => "/Users/ph/es/logstash-config/certificates/logstash-forwarder.crt"
   ssl_key => "/Users/ph/es/logstash-config/certificates/logstash-forwarder.key"
  }
}

filter {
     metrics {
          meter => "events"
          add_tag => "metric"
        }
}

output {

    if "metric" in [tags] {
        stdout {
          codec => line {
            format => "rate: %{[events][rate_1m]}"
          }
     }
 }

}

lsf.conf

{
  "network": {
    "servers": [ "localhost:6782" ],
#    "ssl ca": "/tmp/lumberjack.crt",
    "ssl ca": "/Users/ph/es/logstash-config/certificates/logstash-forwarder.crt",
    "timeout": 15
  },
  "files": [
    {
      "paths": [
      "/tmp/multi*log"
      ]
    }
  ]
}