White Paper: How to configure syslog-ng™ PE to cooperate with Splunk

Splunk is a popular search and analysis platform. Many users of Splunk also have syslog-ng™ deployed in their environments. This guideline describes scenarios in which Splunk users can benefit from syslog-ng™ Premium Edition features and offers some technical guidance to optimize the syslog-ng™ configuration.

Read this guide to see four use cases, including:

• Collecting logs from network devices
• Long-term log storage
• Advanced filtering on clients to reduce data load
• Routing to Splunk using the syslog-ng Store Box appliance