**这是本文档旧的修订版！**

<markdown>

logstash → elasticsearch 处理 bunyan(json format) log

filter {
    json {
        source => "message"
    }
    
    date {
        match => ["time", "ISO8601"]
        target => "@timestamp"
    }
}

output {
    elasticsearch {
        hosts => ["localhost"]
        index => "%{type}-%{dateStr}"
        codec => json
    }
}

</markdown>