gistfile1.txt

filter {
    grok {
        pattern => "%{TIMESTAMP_ISO8601:timestamp} %{LOGLEVEL:severity} %{NOTSPACE} %{NUMBER:duration}s %{NOTSPACE} %{GREEDYDATA:message}"
        tags => ["webservice-requests"]
    }
    mutate {
        add_field => ["shipper_timestamp", "%{@timestamp}"]
    }
    date {
        match => ["timestamp", "ISO8601"]
        tags => ["webservice-requests"]
    }
}