one thing to consider is to send all of your logs over the UDP syslog service to a collector like splunk or another server that just listens on UDP and writes t

one thing to consider is to send all of your logs over the UDP syslog service to a collector like splunk or another server that just listens on UDP and writes them to disk. will save you the trouble of hooking up an external disk to the raspberry pi device and start you down the path of centralization and management.