I am not trying to create an opinionated question here though it might sound like it. My problem is as follows.
I have the normal apache2 access and error log on a bunch of servers. I also have custom logs with custom formats.
I have noticed a beginning performance issue due to the amount of lines being written into the log files so I am looking for alternatives.
I would love to somehow gather the log entries. I have been trying to understand how syslog works and I think that's the direction I need to go since the syslog would function as a kind of buffer.
I know of a program called greylog... But I am not sure if that is the direction I should go... Maybe someone have experience on a similar setup and could share how they made it work?