test and fix for LOGSTASH-2288