Key design decision — the app doesn't know ELK exists. The Express app only writes structured JSON to stdout via Winston. It has no Logstash/Elasticsearch client, no network dependency on the logging ...