[logstash] Add json parsing

ansible/roles/logstash/files/logstash.yml

@@ -1 +1,23 @@
-path.config: /usr/local/etc/logstash/conf.d/
+input {
+  beats {
+    port => 5044
+  }
+}
+
+filter {
+  if "json" in [tags] {
+    json {
+      source => "message"
+      target => "json"
+    }
+  }
+}
+
+output {
+  elasticsearch {
+    hosts => ["http://elastic.service:9200"]
+    index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
+    #user => "elastic"
+    #password => "changeme"
+  }
+}

ansible/roles/logstash/files/pipeline.conf

@@ -1,10 +1 @@
-input {
-    file {
-        path => "/var/log/messages"
-    }
-}
-output {
-    elasticsearch {
-        hosts => [ "localhost:9200" ]
-    }
-}
+path.config: /usr/local/etc/logstash/conf.d/

ansible/roles/logstash/tasks/main.yml

@@ -10,17 +10,17 @@
 - name: Logstash config file installed
   copy:
     src: logstash.yml
-    dest: /usr/local/etc/logstash/logstash.yml
+    dest: /usr/local/etc/logstash/logstash.conf
     owner: root
-    mode: 0644
+    mode: 0664
   notify: Logstash restarted
 
 - name: Logstash config file installed
   copy:
-    src: logstash.yml
+    src: pipeline.conf
     dest: /usr/local/etc/logstash/pipeline.conf
     owner: root
-    mode: 0644
+    mode: 0664
   notify: Logstash restarted
 
 - name: Logstash started