Hi,

recent syslog-ng versions should be fast enough to follow http access log files, but I give you that transferring compressed files can be more performant, although the latency is definitely higher. (in the order of minutes instead of seconds).

Cheers,

Bazsi

On Mon, Dec 15, 2014 at 3:25 PM, Kevin Kadow <kkadow@gmail.com> wrote:

Centralizing logging from Apache may not be a good fit for syslog-ng, I'd instead consider aggressively rotating logs on each server where the websites are hosted, then use a file-based transfer mechanism.

______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq

Bazsi