https://www.elastic.co/guide/en/logstash/current/index.html http://udn.yyuap.com/doc/logstash-best-practice-cn/index.html