logstash_insert
int logstash_insert(const char *, size_t, int, pid_t);
logstash_insert(SCARG(uap, buf), nbyte, error, p->p_p->ps_pid);