The directory /usr/share/logstash must be owned by logstash and the permission of data directory should be 777
$ chown -R logstash.logstash /usr/share/logstash
$ chmod 777 /usr/share/logstash/data
Also check the user who owns logstash in /etc/default/logstash by default it is logstash.
.................................
................................
LS_USER="logstash"
LS_GROUP="logstash"
...............................
..............................