[Karunamon]

Not sure what you mean by forwarding support - my entire environment is configured with syslog-ng forwarding to various places based on various rules.

Heck of a lot faster than rsyslog. The one thing I've not been able to do is get rsyslog forwarding to syslog-ng. Something happens to the message format between systems that leads to hilariously incorrect filenames on the collector systems.

[lobster_johnson]

By forwarding I mean reliable, disk-buffered forwarding. This only exists in the commercial "Premium Edition" of syslog-ng.

[b0ti]

There is disk based buffering in NXLog CE. You might want to check it out with respect to the other woes you have with rsyslog.

[lobster_johnson]

Never heard of that one, thanks.

[otterley]

... which I highly recommend until you outgrow it and graduate to Kafka.

[lobster_johnson]

On the other hand, it's pricy and last I checked, licensing is based on the number of machines (ridiculous in a cloud environment).