logging: replace rsyslog with logstash-forwarder

Same import reason.