I have 3 separate CMS LAMP applications:
- cms1.example. com
- cms2.example. com
- cms3.example. com
running separately on different AWS EC2 instances.
I want to set up separate centralized log system on a separate EC2 instance which will receive input from three EC2 instances to a single monitoring server.
We want to filter logs of live Apache and MySQL logs by users wise query.
Is ELK or Graylog the best solution for above? How to set up ELK with the above scenario?