Modular logstash policy