Logstash/ElasticSearch collector

[adamancini]

Describe the rationale for the suggested feature.

we should provide a way for users to query a log aggregation system to pull cluster-wide logs from a single source as an alternative to defining all the individual pod selectors that might be required for an application.

would be useful for systems with ephemeral pods where they may be created & destroyed dynamically - if we only rely on pod selectors, but ephemeral pods no longer exist, then logs will not be collected from those sources - but if a log aggregation system is being used in the cluster, we could query the backend of that system and obtain any historical data from ephemeral resources.

Describe the feature

provide a logstash collector for ELK logging stack that can take a date range (30, 60, etc.) and possibly a filter and pull selected logs into support bundle