Where to change location of the logstash log file

Why would you run Logstash via nohup?

For nohup option I would presume all goes out to output file for the nohup process?

Yes. Unless, as I said, the -l/--log option is passed.