add first logstash implementation