[syslog-ng] Archive module ?
scotrn at gmail.com
Thu Sep 8 22:32:28 CEST 2016
Is there a better way to archive my syslog data once it’s been received and injected into elk,spunk or whatever ?
I see how I can log my data to flat files using date macros then compress and archive as normal data but is there a better way to write out the data in the same format it was received to facilitate re-injesting ?
For example: My syslog data on file does not include the original syslog header data .
Syslog is just one example.
More information about the syslog-ng