Figuring out logstash problems