Improve logstash conf
Add correct group for service