Do you know if it will only send new events from the time of the channel creation? We don't want to send 5gb of data going into the past.
... View more
I believe syslog-ng will do what you want, We use it extensively just not with filters. Will take some experimentation to get it working the way you want.
https://syslog-ng.com/documents/html/syslog-ng-ose-latest-guides/en/syslog-ng-ose-guide-admin/html/reference-filters.html
... View more