We use mw1017 for live debugging but there is not much logging support for that. Like testwiki.log, there should be an mw1017.log file which includes all events which happened on mw1017. (Or maybe all events which happened on mw1017 when the X-Wikimedia-Debug header was set.)
This is "just" a matter of configuration. Under the current hosting setup I think it might mean replacing testwiki.log with mw1017.log since all testwiki requests (for now) are served by mw1017. I think we'd want to solve T117019: testwiki.log should include all channels at the same time to really make the log useful.
Now logged to fluorine:/a/mw-log/mw1017.log. It does not go into logstash at this point (neither does testwiki.log nor test2wiki.log). We should evaluate log volume and usefulness to see if that would be desirable as a separate ticket.