Logstash.Conf input { file { type => "SSRCode" path => "E:/FTPRootWorkSpace/SD/2016*/2016*/*.txt" start_position => "beginning" } } filter { csv { columns => ["Code","Source"] separator => "," } kv { source => "uri" field_split => "&?" value_split => "=" } } # output logs to console and to elasticsearch output { stdout {} elasticsearch { hosts => ["132.16.1.86:9200"] } }