Permission problem when starting logstash with systemd on suse

You could try enabling log.level trace. See what filewatch has to say.