I ran it on a VM with 2 cores tops and a couple of GB of RAM for about 50MB of logs per day.

For most self hosted use cases Splunk's free 500MB (per day) license should be enough. It's way easier to set up and maintain than ELK and has tons of free extensions for parsing log formats and dashboards.