Add logstash-forwarder feature to elkstack