Loghandling is quite resource intensive.
All the log ingestion systems i have seen were bigger elastic search clusters.