谁有原创的教人怎么写 logstash 配置文件的？（有内文）

[JimmyKudo.Sun]

看了ELK有段时间了，也把日志格式全都规整成JSON格式了，但看了很多所谓的教程还是不会写，网上找到的都是你抄我，我抄你，都是抄来抄去的，每一个有用的。

比如，比如，我日志全都规整成了这样的格式：（本来是一行一个日志，为了看的清楚，我调整了下格式，共四个日志样例），这样的配置文件要怎么写呢？（日志我先保存到了文件，用的log4cplus，每天一个文件名字）


[2018-09-05 00:00:00.467] --- 日志记录时间，下同
{
"pktype":"gwrx", --- 包类型，下同，四种包类型
"eui":"6073bc0002100012", --- 标识符
"payload": --- 内容
{
"tmst":333974364,
"nsrecvtime":"2018-9-5 00:00:00:458",
"freq":483.50,
"datar":"SF9BW125",
"coder":"4/5",
"rssi":-95,
"snr":10.2,
"frame":
{
"type":"JoinReq",
"payloadlen":23,
"toa":206000
}
}
}

[2018-09-05 00:01:32.069]
{
"pktype":"gwtx",
"eui":"6073bc0002100012",
"payload":
{
"mote":"004a770153000003",
"downtype":"A",
"tmst":17606746620,
"freq":502.50,
"datar":"SF12BW125",
"coder":"4/5",
"rx":2,
"frame":
{
"type":"Down-UnCfm",
"payloadlen":0,
"toa":1156000
}
}
}

[2018-09-05 00:01:32.069]
{
"pktype":"moterx",
"eui":"004a770153000003",
"payload":
{
"devaddr":"c80017d9",
"downtype":"A",
"appeui":"2c26c50065000035",
"freq":502.50,
"datar":"SF12BW125",
"coder":"4/5",
"rx":2,
"gweui":"6073bc0002100012",
"frame":
{
"type":"Down-UnCfm",
"fctl":
{
"adr":1,
"ack":1,
"fpend":0,
"optlen":0
},
"fcnt":63204,
"fport":255,
"payloadlen":0,
"toa":1156000
}
}
}

[2018-09-05 00:01:00.401]
{
"pktype":"motetx",
"eui":"004a770019000001",
"payload":
{
"devaddr":"c800012b",
"nsrecvtime":"2018-9-5 00:00:59:689",
"appeui":"004a770019000001",
"freq":488.30,
"datar":"SF12BW125",
"coder":"4/5",
"recvgwcount":1,
"gwlist":
[
{
"gweui":"6073bc0001000066",
"rssi":-110,
"snr":1.5
}
],
"frame":
{
"type":"JoinReq",
"payloadlen":23,
"toa":1483000
}
}
}