Added logstash-lite which only captures login or connect events