add todo & link to logstash filter