Logstash is part of the Elastic Stack that performs log file filtering and enrichment.
Logstash is deployed as a systemd unit, called logstash. Normal systemd procedures apply here:
sudo systemctl start logstash sudo systemctl status logstash sudo systemctl stop logstash sudo systemctl restart logstash
It can also be managed using the
/etc/logstash/ - main config path
/etc/logstash/conf.d - ROCK specific config
/var/lib/logstash - data path