is ELK still the best method for doing selfhosted log ingest/search/index/parse? what's state of the art? is there a single container setup i can use for a relatively low volume of logs?