We have been using the ELK stack and so far we are very happy with it. ELK is doing both centralized logging and service metrics. Usually services log to sysl

We have been using the ELK stack and so far we are very happy with it. ELK is doing both centralized logging and service metrics. Usually services log to syslog which ends up in a file like /var/log/$service.log and then we use filebeats (also from elastic) to send that file to an ELK server.