logstash data saved on docker volume