added Malcolm

Vagrant/resources/malcolm/logstash/pipelines/external/00_config.conf

@@ -0,0 +1,3 @@
+  queue.type: persisted
+  queue.max_bytes: 4gb
+  path.queue: "/logstash-persistent-queue"

Vagrant/resources/malcolm/logstash/pipelines/external/01_input_external_es.conf

@@ -0,0 +1,6 @@
+input {
+  pipeline {
+    address => "${ELASTICSEARCH_PIPELINE_ADDRESS_EXTERNAL:external-es}"
+  }
+}
+

Vagrant/resources/malcolm/logstash/pipelines/external/99_elastic_output.conf

@@ -0,0 +1,13 @@
+output {
+  elasticsearch {
+    id => "output_external_elasticsearch_moloch"
+    hosts => "${ES_EXTERNAL_HOSTS}"
+    ssl => "${ES_EXTERNAL_SSL:true}"
+    ssl_certificate_verification => "${ES_EXTERNAL_SSL_CERTIFICATE_VERIFICATION:false}"
+    user => "${ES_EXTERNAL_USER:}"
+    password => "${ES_EXTERNAL_PASSWORD:}"
+    manage_template => false
+    index => "sessions2-%{+YYMMdd}"
+    document_id => "%{+YYMMdd}-%{zeekLogDocId}"
+  }
+}