logging: replace rsyslog with logstash-forwarder

Added a card to discuss and handle this use case:
https://trello.com/c/d4LVDdJR/245-separate-role-for-tls-cert-management