diff --git a/utils/elk/logstash-kippo.conf b/utils/elk/logstash-kippo.conf
index f2bd53a..9e171a0 100644
--- a/utils/elk/logstash-kippo.conf
+++ b/utils/elk/logstash-kippo.conf
@@ -2,7 +2,7 @@ input {
        # this is the actual live log file to monitor
        file {
               path => ["/home/kippo/kippo-git/log/kippo.json"]
-              codec => json
+              codec => json_lines
               type => "kippo"
        }
        # this is to send old logs to for reprocessing