input { udp { port => 9996 codec => netflow { versions => [9] definitions => "/etc/logstash/mikrotik.netflow9.yaml" } type => "netflow9" } } output { elasticsearch { hosts => ["localhost:9200"] codec => "json" index => "logstash-%{type}-%{+YYYY.MM.dd}" } }