logstash was missing