update logstash