It appears the 'modern' way to get logs into logstash would be via Filebeat
https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-configuration.html
I assume we can keep the existing filter (applied on logstash host) and configure filebeat to output to logstash path.