logging: first pass at logstash-forwarder

This is a first pass at shifting to use [Logstash-Forwarder](https://github.com/elasticsearch/logstash-forwarder) for log shipping. This is an alternative to the previous rsyslog attempts after numerous discussions on tradeoffs. 

Known Issues which will be fixed in new smaller PRs:
 - Global log config instead of per-service
 - Own certificate instead of shared/common
 - Missing cleanup from prior rsyslog attempts