output {
    if "metric" not in [tags] {
        elasticsearch {
            hosts => ['elasticsearch-101', 'elasticsearch-102', 'elasticsearch-103', 'elasticsearch-104']
            user => "logstash"
            password => "**********************"
            cacert => "/usr/local/share/ca-certificates/ca.crt"
            ssl => true
        }
    }
}