{
  "_index": "logstash-switch_cisco-2014.11.21",
  "_type": "switch_cisco",
  "_id": "hDtHS4J7S16gpqwxPgdJGA",
  "_score": null,
  "_source": {
    "message": "Nov 21 13:01:59 192.168.170.90 92852: SwCisco3750Club: 73547048: .Nov 21 13:01:38: %SW_MATM-4-MACFLAP_NOTIF: Host 0050.56b2.42d4 in vlan 100 is flapping between port Po6 and port Po5",
    "@version": "1",
    "@timestamp": "2014-11-21T16:30:51.383Z",
    "type": "switch_cisco",
    "host": "a_host",
    "path": "/var/log/ciscoswitch.log",
    "tags": [
      "switch_cisco_parsefailure"
    ]
  },
  "sort": [
    null
  ]
}