temporary working place for att-logstash