Filebeat configuration log file path won't load


I have a custom configuration for filebeat for logging:

logging.level: warning
logging.to_files: true
  path: /var/log/filebeat/
  name: filebeatVdpQueries
  keepfiles: 7
  permissions: 0644

But when service starts, the file permission aren't in 0644 then 0640.

-rw-r-----. 1 root root  786 Sep 21 11:50 /var/log/filebeat/filebeatVdpQueries
-rw-r-----. 1 root root  786 Sep 21 11:50 /var/log/filebeat/filebeatVdpQueries.1

the configuration filebeat.service:


Environment="BEAT_CONFIG_OPTS=-c /etc/filebeat/filebeat-denodo-qal-vdpQueries.yml"
Environment="BEAT_PATH_OPTS=-path.home /usr/share/filebeat -path.config /etc/filebeat /var/lib/filebeat-denodo-qal-vdpQueries -path.logs /var/log/filebeat-denodo-qal-vdpQueries"
ExecStart=/usr/share/filebeat/bin/filebeat -environment systemd $BEAT_LOG_OPTS $BEAT_CONFIG_OPTS $BEAT_PATH_OPTS

I know the filebeat configuration is not override by the service configuration but it's not explain the permission changment.
On the server all the command are lunch with root user.

Anybody have an explanation ?