monitord events are closely tied to the normalized stampede database events. These same events are sent to an AMQP end point. However, it becomes harder to correlate these events in elastic search, and users end up building composite indexes themselves .