[syslog-ng] Archive module ?

Scot Needy scotrn at gmail.com
Thu Sep 8 22:32:28 CEST 2016

Hi All, 

Is there a better way to archive my syslog data once it’s been received and injected into elk,spunk or whatever ? 

 I see how I can log my data to flat files using date macros then compress and archive as normal data but is there a better way to write out the data in the same format it was received to facilitate re-injesting ? 

For example: My syslog data on file does not include the original syslog header data . 

Syslog is just one example. 

More information about the syslog-ng mailing list