logstash starting to work effectively