<NME> esriver.conf
<BEF> ADDFILE
<MSG> sample elasticsearch_river usage

<DFF> @@ -0,0 +1,21 @@
+input {
+  file {
+    type => "syslog"
+    path => "/var/log/messages"
+  }
+}
+
+filter {
+  grok {
+    type => "syslog"
+    pattern => ["%{SYSLOGLINE}"]
+  }
+}
+
+output {
+  stdout { }
+  elasticsearch_river {
+    es_host => "localhost"
+    amqp_host => "localhost"
+  }
+}

sample elasticsearch_river usage