I have a multitier application, consisting of many servers on different subnets (each one of these subnets dedicated for the application purpose they provide with no other servers independent of the application). Those servers are windows, debian, freebsd and in the future there might be others too.
I want to have a Centralized logging mechanism for my systems. Problem is I want the data collected to a DMZ first and then accessed by the log server that will be on a different local network subnet.
I also need logging for my network devices, but this could be an entirely different logging server for all I care (though it would be better if this was not the case).
How would you impelement this type of logging? The architecture is tiered like this for security purposes and will not change.
I have already seen Scribe and Logstash as viable solutions. Would you recomend them for an undertaking such as the one described earlier?
Is the implementation of scripts using ssh mechanism the way to go?