updating logstash paths to use /usr/src