Thanks a lot for all the informations!!
Now my configuration is ok and also the logs output files!!
My if statements work fine!
The last point is about log rotations. To detele the output files after a period of time.
Do ELK provide something about this?