cmopregistry/elk repository overview

input {
  tcp {
    port => 4560
    codec => "json"
  }
}

output {
  elasticsearch {
    hosts => ["localhost"]
    index => "%{[index]}"
  }
}

# cat Dockerfile 
FROM sebp/elk

# overwrite existing file
ADD ./30-output.conf /etc/logstash/conf.d/30-output.conf