fix - rsync copy over is making logstash read duplicates