add sample logstash.conf