14 ms·
Can your endpoints log to syslog so they can be forwarded on to a central collector?
by gelliott 12y ago
Can your endpoints log to syslog so they can be forwarded on to a central collector?
- beagle3 12y agoProbably. Do you know of a syslog/forwarder that deals properly with intermittent connections? (i.e., available for an hour, then gone for an hour, then available again, etc.)
- b0ti 12y agoNot sure about logstash but a lot of its users use NXLog (http://nxlog.org http://nxlog.org) as a shipper since it has a much lower resource footprint as there is no java and ruby in there. (I'm affiliated with NXLog.)
- otterley 12y agoSyslog-NG PE works well for this. It can be configured to use a per-destination disk buffer, so that if the destination goes offline, messages will queue until they can be sent again.