`Z` and `+00:00` are equivalent, but other than saving a few bytes on the wire it doesn't matter to me, it won't make a difference on the logstash side.

http://en.wikipedia.org/wiki/ISO_8601#UTC