[11:37:52] curious, apache2 was using all CPU on logstash1025 and that was causing the kafka lag [11:38:14] suspiciously started at 6 UTC, so I'm guessing some log related activity