Logstash file input

logstash-file.conf

input {
 file {
      path => ["/var/log/account.log"]
      format => "plain"
      type => "syslog"
 }
}

filter {
  grok {
      type => "syslog"
      pattern => "%{TIMESTAMP_ISO8601:timestamp} %{WORD:auth_id} %{SYSLOGPROG:prog} - %{LOGLEVEL:log_level}: %{GREEDYDATA:message}"
  }
}

output {
  stdout { debug => true debug_format => "json"}
}