input { http { } } filter { grok { match => {"log" => "%{COMBINEDAPACHELOG}"} } } output { amazon_es { hosts => ["fakedomain.us-east-1.es.amazonaws.com"] region => "us-east-1" index => "my-index" } }