Fix typo in $logstash_user