For small deployments, you might be surprised how far you can get with just systemd/journalctl. It even has built in aggregation over a network.