fix logstash provision