at aptible - we prefer fluentd. one of our engs talks about the reasons why in the article above, but the tldr is fluentd is extensible like logstash, but far better performance