{
  "inputs": [
    {
      "name": "rabbitmq",
      "tag": "user_log",
      "queue": {
        "name": "logstash.service.users"
      },
      "exchange": {
        "name": "logstash"
      },
      "routing_key": "logstash.*.users"
    },
    {
      "name": "rabbitmq",
      "tag": "system_log",
      "queue": {
        "name": "logstash.service.system"
      },
      "exchange": {
        "name": "logstash"
      },
      "routing_key": "logstash.*.system"
    }
  ],
  "parsers": [
    {
      "name": "regex",
      "tag": "system_log",
      "format": "time=\"$_\" logLevel=$logLevel message=\"$message\" Datetime=$Datetime instanceID=$instanceID serviceName=$serviceName serviceVersion=$serviceVersion traceId=$traceId"
    },
    {
      "name": "json",
      "tag": "user_log"
    }
  ],
  "outputs": [
    {
      "name": "stdout",
      "tag": "system_log",
      "format": {
        "name": "ltsv",
        "pairs_delimiter": ":",
        "value_delimiter": "\t"
      }
    },
    {
      "name": "file",
      "tag": "user_log",
      "format": {
        "name": "ltsv"
      }
    },
    {
      "name": "file",
      "tag": "system_log",
      "file_name_from_field": "serviceName",
      "format": {
        "name": "ltsv"
      }
    },
    {
      "name": "postgresql_denormalized",
      "tag": "user_log"
    }
  ]
}