So it mostly works. You just need to fix the index pattern where Logstash is writing it's data. You can see what happens with the following command:
$ curl "localhost:9200/_cat/indices?v" 02:06:58
health status index pri rep docs.count docs.deleted store.size pri.store.size
yellow open .kibana 1 1 1 0 3kb 3kb
yellow open %{[@metadata][beat]}-2017.10.29 5 1 4 0 9.2kb 9.2kb
Kibana can even work with this:
