[bbq]

Agreed about logstash being too heavy for your app servers. It would be nice to have the functionality in a trim, native binary.

As things are, one can always direct an app sever's syslog to a logging fleet running logstash (or elasticsearch running embedded logstash): http://cookbook.logstash.net/recipes/rsyslog-agent/

[tveita]

I think that's what Heka is supposed to be.

It looks pretty promising, but I have yet to meet anyone who uses it.

https://blog.mozilla.org/services/2013/04/30/introducing-hek...

[bbq]

Oh, that looks very nice. Neat to embed Lua as a sandboxed plugin environment.