Check if the logstash indexing is right on time

check_ls.sh

curl -s "a.b.c.d:9200/logstash-2013.11.12/_search?pretty" -d '{
      "query": {
          "match_all": {}
      },
      "from": 0,
      "size": 1,
      "fields": [ ],
      "sort": {
          "@timestamp" : "desc"
      }
    }'

# gives the timestamp (epoch style) of the latest indexed document. If your want to match against a particular field (source server to check per shipper) turn "match_all" query into a "match" : { "servername": "foobar" }