Add /var/lib/logstash

Fixes #2160