Transitioning from v1 to v2

[senatorhotchkiss]

After replacement of legacy SO and update of winlogbeat, I found that all events forwarded from my Windows, does not appear in logstash-beats* index. A lot of fields are therefore not indexed. They appear fine in So index.

Also how do one translate old custom parsers in custom.d input to the new format? I made a bunch of these.

Help bringing a rookie up to date.