update logstash forwarder