lumberjack should be named logstash-forwarder
add PTR entry to etcd
updated to syslog-ng, remove lumberjack