logging: replace rsyslog with logstash-forwarder

Any reason for leaving commented out code? I dislike dangling dead code, makes it hard to know what to do in the future. Git has a history of what was there, is that sufficient?