I used the http input plugin
input {
tcp {
port => 433
}
}
filter{
split { field => "[results]" }
json { source => "[results][value]"}
}
and it works , i don't recommend to use tcp in this use case