output{ elasticsearch{ hosts => [ip,ip,ip] index => "zx-1" document_id => "%{serail_no}" //serail_no为解析时的字段key } }