added and updated some docker files

changed elasticsearch image to the original elastic one

dockerfiles/logstash/logstash.conf

@@ -0,0 +1,22 @@
+input {
+  stdin { 
+    type => syslog
+        }
+      }
+
+filter {
+  if [type] == "syslog" {
+      grok {
+            match => { "message" => "%{SYSLOGTIMESTAMP:syslog_timestamp} %{SYSLOGHOST:syslog_hostname} %{DATA:syslog_program}(?:\[%{POSINT:syslog_pid}\])?: %{GREEDYDATA:syslog_message}" }
+            add_field => [ "received_at", "%{@timestamp}" ]
+            add_field => [ "received_from", "%{host}" ]
+           }
+      date {
+            match => [ "syslog_timestamp", "MMM  d HH:mm:ss", "MMM dd HH:mm:ss" ]
+           }
+  }
+}
+
+output {
+  stdout { codec => rubydebug }
+}