input {
  # Listens on 514/udp and 514/tcp by default; change that to non-privileged port
  # syslog { port => 51415 }
  gelf { }
}

# The following filter is a hack! The "de_dot" filter would be better, but it is not pre-installed with logstash by default.
filter {
  ruby {
    code => "event.to_hash.keys.each { |k| event[ k.gsub('.','_') ] = event.remove(k) if k.include?'.' } "
  }
}

output {
  elasticsearch {
    hosts => ["elasticsearch:9200"]
	  user => "elastic"
    password => "changeme"
  }

  kafka {
    codec => json
    topic_id => "topic"
    bootstrap_servers => "kafka:9092"
  }
}