I deployed some proxy servers that run logstash and nginx. I do not want developers or users hitting the elasticsearch cluster directly. Logstash provides an input to handle JSON text that logstash turns around and sends to elasticsearch. I have nginx proxying requests to the backend elasticsearch cluster. For data ingestion, it is sometimes nice to be able to manipulate messages as the come through or do other logstash filters on them. Is there a way to configure Logstash to accept traffic like it was elasticsearch api calls and send them on, instead of doing this with nginx? The elasticearch input plugin, is just about querying other clusters, not quite what I'm looking for.