Fix logstash provisioning

- Ensure /etc/default/logstash is not modified until logstash package is
  installed.
Merge pull request #146 from justfalter/fix_logstash_provision2

Fix logstash provisioning