remove graylog

At some point I started to replace logstash with graylog but didn't
finish. Reverting back to logstash for now.

deploy

@@ -73,7 +73,7 @@ setup_containers() {
     export BROFACE=${1}
     export ICAPFACE=${2}
     # Order is important - start the pipeline (kafka) first, fsf is before bro because it bro submits files to it, etc...
-    export CONTAINERS="kafka elasticsearch graylog fsf ids rita prometheus fouroneone"
+    export CONTAINERS="kafka elasticsearch logstash fsf ids rita prometheus fouroneone"
 
     for CON in ${CONTAINERS}; do
         lxc profile copy default ${CON}