You can run this, you don't have to be root. Just substitute logstash path with the path where you logstash is installed.
$ /opt/logstash/bin/logstash -f ~/logstash_configs/knockpy.conf
This is a config and some documentation that explains how to import the CSV of subdomains produced by the tool "knock" or "knockpy".
BSD-2-Clause