I've uploaded a GitHub project I am currently working on that pulls CloudFlare ELS logs into the ElasticStack and does some enrichment.
ELS logging requires a domain to use CloudFlare Enterprise license and you must request via support to have ELS logging enabled (No GUI/API command yet).
Let me know what you think or if you have any suggestions.