Fluentd offers true log streaming rather than log batch processing. Its technically possible for logs to get lost with logstash and we didn't like that idea. Fluentd offers a better cloudnative experience with the expectation of failure whereas logstash is better for infrastructures that don't have the expectation of failure.