Disable rsyslog on all servers
All logs are shipped to elasticsearch already, and that feature is monitored. There's no need to keep them locally.
Close T790.