kibana-beat-conf

input {
    beats {
        port => 5044
        codec => multiline {
          pattern => "^%{TIMESTAMP_ISO8601} "
          negate => true
          what => previous
        }
    }
}
filter {
    grok {
        match => { "message" =>  "%{TIMESTAMP_ISO8601:log_timestamp} %{WORD:log_level} %{WORD:module} %{POSINT:proc_id} %{GREEDYDATA:content}" }
    }
}
output {
    elasticsearch {
        hosts => "localhost:9200"
        sniffing => true
        manage_template => false
    }
    stdout {}
}