syslog-ng is a single, high-performance log collector for all of your device-, system-, and application logs, giving you the ability to greatly simplify your logging architecture. syslog-ng is also a high-speed data processor that parses both structured and unstructured log messages.
Elasticsearch, an easy-to-scale and easy-to-search NoSQL data store, has been gaining momentum as the ultimate destination for log messages in recent years and is proving to be more and more popular among users of syslog-ng. Elasticsearch allows you to store any number of arbitrary name-value pairs coming from structured logging or message parsing, and lends itself well to storing log data collected using syslog-ng.
Read this white paper to discover how to: