I've been finding that vector.dev keeps up well. Before I moved to containers, I was using rsyslog, which also kept up incredibly well. I've had both set up to pour directly into elasticsearch, which, if tuned, can keep up as well.