rtl433_syslog_to_elasticsearch.conf

input {

 udp {
    port => "${RTL433_SYSLOG_UDP_PORT:1514}"
    type => syslog
  }

}

filter {

 grok {
    match => { "message" => "%{SYSLOG5424BASE} %{GREEDYDATA:rtl_433_json}" }
 }

 json {
   source => "rtl_433_json"
   target => "rtl_433"
 }

}

output {

  elasticsearch {
    index => "rtl_433-%{+YYYY.MM.dd}"
    manage_template => false
    hosts => "${ES_HOSTS:elasticsearch:9200}"
  }

}