Storing logs in Elasticsearch using syslog-ng

syslog-ng is a single, high-performance log collector for all of your device-, system-, and application logs, giving you the ability to greatly simplify your logging architecture. syslog-ng is also a high-speed data processor that parses both structured and unstructured log messages.

Elasticsearch, an easy-to-scale and easy-to-search NoSQL data store, has been gaining momentum as the ultimate destination for log messages in recent years and is proving to be more and more popular among users of syslog-ng. Elasticsearch allows you to store any number of arbitrary name-value pairs coming from structured logging or message parsing, and lends itself well to storing log data collected using syslog-ng.

Read this white paper to discover how to:

• Parse data with syslog-ng, store in Elasticsearch, and analyze with the help of Kibana data visualization
• Get started with syslog-ng and Elasticsearch 6 on Red Hat Enterprise Linux / CentOS
• Send netdata metrics through syslog-ng to Elasticsearch, and visualize with Kibana