add logstash upstart config; change grok filter