added /var/lib/logstash file creation