I'd certainly recommend syslog-ng rather than logstash, to forward logs to graylog/splunk/kibana. However there is no alternative to these when it comes to sea

I'd certainly recommend syslog-ng rather than logstash, to forward logs to graylog/splunk/kibana. However there is no alternative to these when it comes to search and accessibility. SSH somewhere and awk is not a real option.