change logstash around a bit