Is logstash forwarder expected to be slower than logstash?