run logstash as root so we can capture the system and service logs
oops, missed one