Logstash aggregation filter configuration

Thanks very much!