We chose syslog-ng because it is easy to install, easy to maintain, easy to update, and due to the fact that all data arrive in raw format, we can manipulate it as we want.
Syslog-ng by One Identity excels in extracting and storing logs with a separate configuration file and user-friendly C-style configuration. It integrates seamlessly with multiple platforms, enhancing real-time monitoring. The compound search feature aids in precise log retrieval, though filtering and observability need improvement. While additional integration potential exists, configuration issues and a shortage of skilled professionals present challenges. Solutions may not always integrate correctly, limiting its full potential.
