added etc/sysconfig/logstash file