Web Server Recipies

The Next step is to make sure your data is parsed

So in your logstash configuration you need to use the filter { } section and to parse the data the filter grok would be what you want.

https://www.elastic.co/guide/en/logstash/current/plugins-filters-grok.html

Here is a good page to help you develop you regex's against
https://grokdebug.herokuapp.com/

Oh and for response time or other numeric fields you will want to use a GROKstatement like %{NUMBER:responsetime:int} this way it gets in to elasticsearch as a int field and not string.