2017-12-05 - production
19:20 <gehel> moving eventlogging collection by logstash from logstash1003 to logstash1007, no messages **should** be lost - T175830 [production]