https://www.osradar.com/logstash-filter-in-action/