logstash100[123] are getting old and need replacement. Those servers are used only as logstash endpoints and are thus not consuming much in term of IO or CPU.

Current specs:

• Intel(R) Xeon(R) CPU E5-2420 0 @ 1.90GHz
• 6 CPU, not hyperthreaded
• 2x 500GB spinning HDD (only 50GB allocated)
• 16 GB RAM

This makes them good candidates to move to VMs on Ganeti.

Note that this VMs should be spread across rows as much as possible, but in Ganeti this means that 2 of the 3 VMs will share the same row. A single VM should be able to support the load, so that's OK.

New specs (VM, spec per VM / total):

• CPU: 4 / 12
• HDD: 50GB / 150GB
• RAM: 8GB / 24GB

Note 1: @RobH has expressed interest in provisioning those VMs once they are approved by @akosiaris (T173298#3531206).

Note 2: initial hardware request was done on T173298.

Side note: currently most applications send log to a specific logstash server. Application should start using the LVS endpoint (logstash.svc.eqiad.wmnet) instead.