logstash-elasticsearch-apachelog.conf.template

input {
  file {
    path => "LOG_PATH/access_log"
  }
}

filter {
  if [path] =~ "access" {
    mutate {
      replace => { "type" => "apache_access" }
    }
    grok {
      match => {
        "message" => "%{COMBINEDAPACHELOG}"
      }
    }
  }
  date {
    match => [ "timestamp" , "dd/MMM/yyyy:HH:mm:ss Z" ]
    locale => "en"
  }
}

output {
  elasticsearch {
    hosts => ["https://yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy.ap-northeast-1.es.amazonaws.com"]
  }
  stdout {
    codec => rubydebug
  }
}