A ELK-Design Question

Why not just use the syslog input for Logstash and then put that directly into redis?