High CPU usage logstash

You need to check stdout/stderr. Try sudo journalctl -u logstash.service