I think it's great, just make sure to have plenty of cpu and ram for your elastic cluster because it uses a ton. Additionally, I suggest skipping logstash and shipping logs directly from filebeat -> elastic. Filebeat is very simple to set up and runs on tiny memory allocation.