Admittedly, I don’t have experience with the ELK stack, but my suspicion is that 100% of you adapting MineOS to use winston-elasticsearch is 100% within the server.js 10-14 lines.
That is to say, you might simply be changing from a file-based transport to an elastic-based transport, and you’re good to go.
I’ll leave it at that to stay in the hint realm. I’d be happy to help further when requested.