setfacl used to give logstash permissions to read logs