update: logstash