Licson Lee
says to
YSITD
logstash 收 stdin 然後用 grok 拆開啊