Agreed about logstash being too heavy for your app servers. It would be nice to have the functionality in a trim, native binary.
As things are, one can always direct an app sever's syslog to a logging fleet running logstash (or elasticsearch running embedded logstash): http://cookbook.logstash.net/recipes/rsyslog-agent/