switch to filebeats input

elk/01-mailserver.conf

@@ -1,7 +0,0 @@
-input {
-  udp {
-    port => 10514
-    type => "syslog"
-  }
-}
-

elk/02-beats-input.conf

@@ -0,0 +1,6 @@
+input {
+  beats {
+    port => 5044
+    ssl => false
+  }
+}

elk/Dockerfile

@@ -17,8 +17,10 @@ RUN mkdir  -p /usr/share/GeoIP && \
 WORKDIR ${LOGSTASH_HOME}
 RUN gosu logstash bin/logstash-plugin install --local --no-verify logstash-filter-geoip
 
-# add mailserver listen
-ADD 01-mailserver.conf /etc/logstash/conf.d/
+# override beats input 
+ADD 02-beats-input.conf /etc/logstash/conf.d/
 # override syslog
 ADD 10-syslog.conf /etc/logstash/conf.d/
 
+
+