windowseventlog.conf for logstash

windowseventlog.conf

input {  
      tcp {
              type => "WindowsEventLog"
              port => 3516
	      codec => json { 
	      		charset => [ "CP1252" ]
	      }
      }
}
filter {
    date {
        match => [ "EventTime", "YYYY-MM-dd HH:mm:ss" ]
	timezone => "America/Los_Angeles"
    }
}

output {
	if [type] == "WindowsEventLog" {
		elasticsearch { host => localhost }
	}
}