Winlogbeat via Logstash into Elasticsearch

what is your input section in logstash like? you can tag the beats input events with a winlogbeat tag and the use that in the output section with a conditional