diff --git a/plugins/ingest/build.gradle b/plugins/ingest/build.gradle
index 2d43139a7bb..a66e6bd96e5 100644
--- a/plugins/ingest/build.gradle
+++ b/plugins/ingest/build.gradle
@@ -33,9 +33,10 @@ dependencies {
   compile('com.fasterxml.jackson.core:jackson-databind:2.5.3')
   compile('com.maxmind.db:maxmind-db:1.0.0')
 
+  compile "com.github.spullara.mustache.java:compiler:0.9.1"
   compile 'joda-time:joda-time:2.8.2'
   testCompile 'org.elasticsearch:geolite2-databases:20151029'
-  testCompile 'org.elasticsearch:securemock:1.1'
+  testCompile 'org.elasticsearch:securemock:1.2'
 }
 
 sourceSets {
diff --git a/plugins/ingest/licenses/compiler-0.9.1.jar.sha1 b/plugins/ingest/licenses/compiler-0.9.1.jar.sha1
new file mode 100644
index 00000000000..d1ef908bb33
--- /dev/null
+++ b/plugins/ingest/licenses/compiler-0.9.1.jar.sha1
@@ -0,0 +1 @@
+14aec5344639782ee76441401b773946c65eb2b3
\ No newline at end of file
diff --git a/plugins/ingest/licenses/compiler-LICENSE.txt b/plugins/ingest/licenses/compiler-LICENSE.txt
new file mode 100644
index 00000000000..ac68303cc11
--- /dev/null
+++ b/plugins/ingest/licenses/compiler-LICENSE.txt
@@ -0,0 +1,14 @@
+Copyright 2010 RightTime, Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
+
diff --git a/plugins/ingest/licenses/compiler-NOTICE.txt b/plugins/ingest/licenses/compiler-NOTICE.txt
new file mode 100644
index 00000000000..8d1c8b69c3f
--- /dev/null
+++ b/plugins/ingest/licenses/compiler-NOTICE.txt
@@ -0,0 +1 @@
+ 
diff --git a/plugins/ingest/src/main/plugin-metadata/plugin-security.policy b/plugins/ingest/src/main/plugin-metadata/plugin-security.policy
index 3faba716fd1..32e73816e2f 100644
--- a/plugins/ingest/src/main/plugin-metadata/plugin-security.policy
+++ b/plugins/ingest/src/main/plugin-metadata/plugin-security.policy
@@ -20,4 +20,5 @@
 grant {
   // needed because geoip2 is using reflection to deserialize data into its own domain classes
   permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+  permission java.lang.RuntimePermission "accessDeclaredMembers";
 };