logstash_netscaler.config

input {
	file {
		path => ["/home/netscaler/netscaler.csv"]
		start_position => "beginning"
		sincedb_path => "/dev/null"
		}
}
filter {
	csv {
	separator => ","
	columns => [ "DetectionTime", "DestinationAccount", "LogonProcess", "SourceMachine", "source_hostName", "source_city", "source_region", "source_country", "source_loc", "source_org", "source_postal" ]
	}
	date {
		match =>["DetectionTime","EE MMM dd HH:mm:ss 'GMT-0500' yyyy"]
		target=>"DetectionTime"
	}
}
output {
	elasticsearch {
		hosts => ["localhost:9200"]
		index => "testnetscaler"
		document_type => "account_logon"
	}
	stdout {}
}