At some point I started to replace logstash with graylog but didn't finish. Reverting back to logstash for now.