[syslog-ng] ELK herd to scale

[Fabien Wernli]

Hi Scot,

On Wed, Apr 20, 2016 at 01:00:26PM -0400, Scot Needy wrote:
> Logstash
> I think I’m going to need to re-introduce logstash just to leverage the existing open source material of logstash filters and Kibana desktops. 
> VMware, ASA for example but wanted more real time data. I could probably do the realtime tags with pattendb. 

Just so you know, there actually is a grok parser in the incubator
so this could help you migrate to syslog-ng.