logging: replace rsyslog with logstash-forwarder

Might want a handler flush in here. Otherwise in the case of no service running, you'll notify a restart, hit the start task which starts the service, then the handlers will get ran and will restart the service.