logging: replace rsyslog with logstash-forwarder

I'll think on the defaults. Non-code comments are great! Love 'em. 

- jlk

> On Nov 14, 2014, at 18:43, Myles Steinhauser <notifications@github.com> wrote:
> 
> Here I was trying to document the expected value. If you have a good suggestion how to do that, I would love to use that instead! Is the comment above acceptable or does that need to go away also?