Forward events from DEFCON to logstash