I liked the papertrail client for shipping, but supposedly filebeat can do smarter TLS/TCP and bypass the logstash part