more logstash attempts