input { http { port => 3000 threads => 10.0 ssl => true } } filter { grok { match => {"log" => "%{COMBINEDAPACHELOG}"} break_on_match => false } drop { } kv { source => "message" target => "test" } mutate { add_field => { "message1" => 3 "message2" => 4.2 "message3" => "test3" "message4" => true } rename => { "messagea" => "newMessage" "messageb" => "newMessage2" } copy => { "messagec" => "messaged" } remove_field => ["test", "test2"] remove_field => ["test3", "test4"] uppercase => ["uppercaseField"] lowercase => ["lowercaseField"] trim => ["trimField"] gsub => ["source", "from", "to", "source2", "from2", "to2"] split => { "splitMessage" => ","} } } output { elasticsearch { hosts => ["https://localhost:19000"] user => myuser password => mypassword index => "simple-pipeline" } }