I'm constantly dealing with a quite large amount of logs (growing at around 1Gb a day), and I manage them the old way, dumping the logs before they rotate to a central server and then storing on tape.
Now, because these logs can be requested by authorities, at some point I have to read them, find what they need and send back the interesting parts [I'm located in Italy]... Anyway dealing with that stuff has become quite difficult as the Volume of generated logs keeps growing, my tape storage as well and keeping track of the stuff is not so easy as it was some years ago.
I've tried already Graylog2 and it seems to be a very nice piece of software, the only issue on my way is that there is no easy method to export the logs to another storage, and import back when needed (maybe I understood wrongly the way it works).
Can someone provide me with examples of the process they use to manage such amount of logs or a solution to easily export the logs and import back when needed?
Thanks in advance