graylog 0.11 + ES 0.20.5

not fully tested