Meer is a Suricata (https://suricata.io) and Sagan (https://sagan.io) "spooler". That is, it takes data from JSON (EVE files) from Suricata or Sagan and stores the data in a location of your choice.
Meer supports output to Elasticsearch, Redis, "named pipes" and external programs!!
For documentation, see https://meer.readthedocs.io