logging: replace rsyslog with logstash-forwarder

Woah, I did not expect that chain. I will check into a handler flush.