logstash.conf

input {
        tcp {
                port => 5000
        }
}

## Add your filters / logstash plugins configuration here

filter {
        grok {
                match => { "message" => "%{SYSLOGBASE} %{GREEDYDATA:syslog_message}" }
        }
        date {
                match => [ "timestamp", "MMM dd HH:mm:ss", "MMM  d HH:mm:ss", "ISO8601" ]
                target => "@timestamp"
                timezone => "America/New_York"
        }
}

output {
        elasticsearch {
                hosts => "elasticsearch:9200"
        }
}