Had syslog logstash ports mixed up