Connecting logstash on elastic with security enabled

See this answer. Once you have indexed an document in which [host] is a string, any event in which [host] is an object will be rejected.