set up logstash user and run logstash as it