update logstash config, #20