input { beats { port => "5044" } } filter { json { source => "message" target => "fields" } } output { elasticsearch { hosts => [ "elasticsearch:9200" ] } }