:~# sudo -u logstash cat /var/log/swift/swift-proxy.error
cat: /var/log/swift/swift-proxy.error: Permission denied

:~# puppet apply --modulepath=/home/alexander_noskov/drt-swift/env/cpe_dev_test/modules/:/home/alexander_noskov/drt-swift/lmm/swfit_monitoring_deployment/modules/ /home/alexander_noskov/drt-swift/lmm/swfit_monitoring_deployment/manifests/lmm.pp
Notice: Compiled catalog for *************** in environment production in 0.24 seconds
Notice: /Stage[main]/Main/User[logstash]/groups: groups changed 'logstash' to 'logstash,syslog'
Notice: /Stage[main]/Main/Service[logstash]: Triggered 'refresh' from 1 events
Notice: Finished catalog run in 1.39 seconds
:~# sudo -u logstash cat /var/log/swift/swift-proxy.errorOct 22 22:19:26 *************** proxy-server: SIGHUP received
Oct 22 22:19:56 *************** proxy-server: SIGTERM received
Oct 22 22:57:06 *************** proxy-server: SIGTERM received
Oct 22 23:18:01 *************** proxy-server: SIGTERM received
Oct 22 23:18:22 *************** proxy-server: SIGTERM received
Oct 22 23:18:54 *************** proxy-server: SIGTERM received
Oct 22 23:26:02 *************** proxy-server: SIGTERM received
Oct 23 18:50:55 *************** proxy-server: SIGTERM received

:~# cat /var/log/logstash/logstash.log
{:timestamp=>"2014-10-23T18:53:43.558000+0000", :message=>"failed to open /var/log/swift/swift-proxy.error: Permission denied - /var/log/swift/swift-proxy.error", :level=>:warn}