input {
  elasticsearch {
    hosts => "es-analytics-int.sandbox.aws.gilbarco.com"
    index => "logstash-event-*"
#   Set date range to cover what you are trying to export/import
    query => '{"query":{"range":{"timestamp":{"gte":"2017-03-01T00:00:00.000Z","lte":"2017-03-10T00:00:00.000Z"}}}}'
  }
}


filter {
  mutate {
      convert => [ "organizationId  ", "string" ]
      remove_field => [ "@timestamp" ]
      remove_field => [ "@version" ]
	      }