Add /var/lib/logstash

Fixes #2160

Fixes #2162