> that they refuse to learn things that are difficult and instead simply turn it off. I wish I could do this with our Logstash cluster. It requires so much han

> that they refuse to learn things that are difficult and instead simply turn it off. I wish I could do this with our Logstash cluster. It requires so much hand-holding, and troubleshooting can be quite opaque. Last night the logstash indexing service had 'just stopped', and was sending 57000-character-long json loglines into its own log. And if they do fix a bug, you can't just upgrade one component, you have to upgrade logstash and elasticsearch and kibana... and maybe whichever beats you're using.