As part of enabling JSON log parsing, we need to have an ingestion pipeline defined within ES so that our forwarder can send logs to that if necessary (or we can configure the ingestion pipeline to detect if it should be parsed based on the log record).

Acceptance Criteria:

• We provide a pipeline that can be used to parse log records into JSON when logs with a specific structure are ingested by ES
• Ensure that the pipeline pushes indices to their appropriate index based on the schema
  • app-json-schema_name-00000x
  • infra-json-schema_name-00000x
• Ensure that their is a write alias for each of the json schema indices
  • app-json-schema_name-write
  • infra-json-schema_name-write
• Ensure that the app alias points to the app-json-schema_name-00000x indices
• Ensure that the infra alias points to the infra-json-schema_name-00000x indices