Is it a good option to use rsyslog to forward logs from server to logstash instead of filebeat.
It's a viable option, yes.
I've used filebeat earlier for forwarding the logs and the offset was received as input to logstash. Is there any way we can get the offset from rsyslog.