split logstash into two different services