input {
  file {
    path => "/data/work/logstash/inputlogs/sys_generated.log"
    start_position => beginning
    sincedb_path => "/dev/null"
   # sincedb_path => "/data/work/logstash/inputlogs/sincedb.db"
  }
}

filter {
  if [path] =~ "sys" {
    grok {
      patterns_dir => "/data/work/logstash/patterns"
      match => [ "message",  "%{SYS_CON_LOG}" ]
    }
   date {
     locale => "en"
     match => [ "SYStimestamp", "dd.MMM.YYYY HH:mm:ss:SSS" ]
     target => "@timestamp"
     timezone => "Europe/Berlin"
    }
    #mutate { replace => [ "@timestamp", "%{SYStimestamp}" ] }
  }
}

output {
  elasticsearch {
    host => localhost
#    embedded => true
#    protocol => http
  }
  stdout { codec => rubydebug }
}