Where to change location of the logstash log file

I have both cases - in some it is run as service (sudo root available) - and in other I am running it from non-root account - not as a service but as nohup process ... SO for service the sysconfig file seems to exist on my RHEL 7 so that would be a place to setup it up/change it; For nohup option I would presume all goes out to output file for the nohup process?