Correct the apt filter scoping
Add logstash template to elasticsearch
Prevent split-brained funkyness
Correct file names are correct
set index.cache.field.type = soft
Make sure that logstash is in the vpn
Store keys and hashed passwords in pillar
Hard-code the path to logstash.{crt,key} and store the bits in pillar
The @timestamp is a date, not a string
That is an important comma