services.logstash = {
    enable = true;

    inputConfig = config.lib.logstash.mkNameValuePairs [
      {
        file = {
          type = "syslog";
          path = "/var/log/messages";
        };
      }

      {
        file = {
          type = "apache-access";
          path = "/var/log/apache2/access.log";
        };
      }
    ];

    outputConfig = {
      amqp = {
        host = "mq.provisioning.predictix.com";
        exchange_type = "fanout";
        name = "rawlogs";
        port = 5670;
        ssl = true;
        verify_ssl = false;
        user = "THISISNOTTHEREALUSERNAME";
        password = "THISISNOTTHEREALPASSWORD";
      };
    };
  };