[mikewarot]

If it is critical to have the log, it has to be local. Infrastructure shouldn't die if an internet connection goes down.

You can sent the status of the log out through the data diode, along with a copy of the data.