Logstash update

Changes to support shipping via logstash instead of logstash-forwarder