stderror still open after calling /etc/init.d/logstash start

You should redirect stderror AND stdout of logstash to /dev/null, so all outputs are closed cleanly and automation tools reading the output of the init-script can quit cleanly.