correct logstash configuration