8 Sep
2016
8 Sep
'16
9:32 p.m.
Hi All, Is there a better way to archive my syslog data once it’s been received and injected into elk,spunk or whatever ? I see how I can log my data to flat files using date macros then compress and archive as normal data but is there a better way to write out the data in the same format it was received to facilitate re-injesting ? For example: My syslog data on file does not include the original syslog header data . Syslog is just one example.