logstash now properly read chef log