switch to using logstash module