This should change to the internal address of the log server in the future. It will require another "first boot" step. For now the public DNS works and the Security Group keeps out the riffraff.