Use actual working logstash-forwarder lumberjack configuration.