Logstash sends reasonable-looking POSTs to elasticsearch but they error out. Manually reproducing the request, I get this:
$ cat x.txt {"index":{"_index":"logstash-2016.12.08","_type":"mediawiki"}} {"message":"IP: 10.0.2.2","@version":1,"@timestamp":"2016-12-08T08:51:33.964Z","type":"mediawiki","host":"mediawiki-vagrant","level":"DEBUG","tags":["syslog"],"channel":"wfDebug","url":"/w/index.php?title=VagrantRoleBuggy&buggy=php-exception","ip":"10.0.2.2","http_method":"GET","server":"dev.wiki.local.wmftest.net","referrer":"http://dev.wiki.local.wmftest.net:10000/wiki/VagrantRoleBuggy","uid":"f438aa0","process_id":6806,"wiki":"wiki","mwversion":"1.29.0-alpha","reqId":"d3199355da65d49f228f5c5c","private":false} $ curl -XPOST --data-binary "@x.txt" '127.0.0.1:9200/_bulk?replication=async' {"took":40,"errors":true,"items":[{"index":{"_index":"logstash-2016.12.08","_type":"mediawiki","_id":null,"status":400,"error":{"type":"mapper_parsing_exception","reason":"Failed to parse mapping [_default_]: Mapping definition for [tags] has unsupported parameters: [index_name : tag]","caused_by":{"type":"mapper_parsing_exception","reason":"Mapping definition for [tags] has unsupported parameters: [index_name : tag]"}}}}]}