gistfile1.txt

input {
  #netflow
  udp {
   host => "0.0.0.0"
   port => 9995
   codec => netflow
   type => "netflow"
   tags => "netflow"
  }
}


output {
 if "netflow" in [tags] {
  elasticsearch {
    host => localhost
    protocol => http
  }
  stdout { codec => rubydebug }
 }
}