I should point out that the message I get is kind of two parts.
<13>1 2017-12-07T07:04:02.720491-06:00 internal-web user- - [timeQuality tzKnown="1" isSynced="1" syncAccuracy="136000"]
This portion is added by the logger command and not part of my actual speed test. If I could get it transferred to my ELK stack without this portion, I would prefer it.
2017-12-07 07:04:02 2017-12-07 07:04:30 Time Warner Cable 10.10.10.10 Grande Communications (San Marcos, TX) 94.31 26.775 336.03 23.38 http://www.speedtest.net/result/6858080753.png
This is the output from my actual command and the only part that I care about, but I can't parse this without dealing with the first half.