basic logstash forwarding