Log issue with upgrade from 5.6.8 to 6.3.2

Trying to do an upgrade on centos7

I have path.logs defined in my yml file as
path.logs: /var/log/elasticsearch

but logs seem to be written to /usr/share/elasticsearch/${sys:es.logs}.log

Any ideas?

Figured out my problem. Needed to copy the log4j properties file from the previous install