<match *.**>
    type copy
    <store>
       type elasticsearch
       host {{ kolla_external_vip_address }} 
       port {{ elasticsearch_port }}
       logstash_format true
       logstash_prefix flog
       flush_interval 15s
    </store>
</match>
