Default sysconfig user is now logstash instead of root
Homedir now reflects install path