This is a stop-gap fix. We are re-adding the ubuntu user to the adm group... the logstash cookbook stomps the list of users in the group, so we have to rebuild it.... down the road it may make sense to abandon the community cookbook as it really has a lot of dependencies that we don't need (and likely never will).