Can I use syslogNG

[pfabrizi]

We currently use rsyslog on our Linux forwarder with a file monitor input with filtering, but we would like to use syslogNG as we believe we can filter as the syslog streams in to the forwarder, reducing the size of the file and what gets indexed.

can anyone provide some assistance?

Thank You!

[plarsen]

I believe syslog-ng will do what you want, We use it extensively just not with filters. Will take some experimentation to get it working the way you want.

https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/r...