logging: replace rsyslog with logstash-forwarder

I agree about commented out code and try to avoid it. And I agree, git history is more than sufficient.

Here I was trying to document the expected value. If you have a good suggestion how to do that, I would love to use that instead! Is the comment above acceptable or does that need to go away also?