grab logstash changes