Please format your code using </>
icon as explained in this guide. It will make your post more readable.
Or use markdown style like:
```
CODE
```
I’m pretty sure this logstash config does not work.
Which means you’re not copy/pasting it.
What is the mapping for your index?