[syslog-ng] Archive module ?

[Scot Needy]

Hi All, 

Is there a better way to archive my syslog data once it’s been received and injected into elk,spunk or whatever ? 

 I see how I can log my data to flat files using date macros then compress and archive as normal data but is there a better way to write out the data in the same format it was received to facilitate re-injesting ? 

For example: My syslog data on file does not include the original syslog header data . 

Syslog is just one example.