input { file { path => "/var/log/messages" } } output { elasticsearch { hosts => [ "localhost:9200" ] } }