input {
  tcp {
    port => 2856
    codec => json_lines
  }
}

filter {
  mutate {
    convert => {
      "tenantId" => "integer"
      "userId" => "integer"
    }
  }
}

output {
  elasticsearch {
    hosts => ["127.0.0.1:9200"]
    user => "user"
    password => "secure"
  }
}

"logstash-2016.04.25" : {
      "mappings" : {
         "logs" : {
            "_all" : {
               "omit_norms" : true,
               "enabled" : true
            },
            "properties" : {
               ...
               "userId" : {
                  "type" : "long"
               },
               "tenantId" : {
                  "type" : "long"
               },
               ...
            }
         }
      }
   }