filter {
    if [type] == "inventory" {
      csv {
        columns => ["zabbix_id", "resource_name", "hostname", "os", "serial_no", "model", "hw_arch", "vendor", "cpu", "memory" ]
      }
 
      mutate {
          remove_field => ["path", "message", "@version"]
          lowercase => ["resource_name", "hostname"]
      }
   }
}
 
 
{
       "@timestamp" => "2015-08-05T18:57:06.734Z",
             "host" => "nysv0654",
             "type" => "inventory",
        "zabbix_id" => "10524",
    "resource_name" => "NY-QCKR-D-APP-003.example.org",
         "hostname" => "nyvm1075",
               "os" => "Red Hat Enterprise Linux Server release 6.2 (Santiago)",
        "serial_no" => "VMware-42 1f de 2e 6a 62 16 7f-eb 38 20 46 76 08 9f e6",
            "model" => "VMware Virtual Platform",
          "hw_arch" => "x86_64",
           "vendor" => "VMware, Inc.",
              "cpu" => "2",
           "memory" => "3.74 GB"
}