I have several www servers in DMZ. My monitoring and log gathering server lays in my LAN. There is no comunication like
WWW server in DMZ ----> monitor server in LAN.
I can connect DMZ from my LAN
LAN --via proxy--> WWW server in DMZ.
I'm going to use syslog-ng. Problem is that syslog-ng work in client-server architecture and clients connect to server to send logs.
Is there a way to configure syslog-ng in some type passive mode that server (in my LAN) will connect to clients(DMZ) and collect logs?
EDIT: I was reading about Zabbix proxy (zabbix can monitor logs) ... And teoreticaly relying on zabbix docs it will be posible to make my scenario work. Anybody can confirm that?