logging: replace rsyslog with logstash-forwarder

Good call, didn't think of that but will make the change!