input { file { path => "/var/log/httpd/access_log" start_position => "beginning" type => "logs" } } filter { grok { match => [ "message", "%{COMBINEDAPACHELOG}" ] } } output { elasticsearch { hosts => [ "localhost:9200" ] index => "apache_accesslog" } }