What does the [Time] field look like if you use this?
output { stdout { codec => rubydebug { } } }
In elasticsearch timestamps are stored as the number of milliseconds since the epoch. You can change the display format in Kibana. If you want to store a different string format you can use ruby.