What is the best logging system to use?

Question

ubuntu

Good afternoon.
There is a small park of servers.
about 6 for ubuntu, as well as two carrier cars for kvm (proxmox) and eschi, inside of which there are also vmki from ubuntu.
What do you think is the best way to collect logs?
mostly from wheelbarrows to ubuntu, but of course it would be possible to take data from kvmki (although this is mediocre, basically everything is needed from virtual machines, which is inside)
Now I aggregate logs with a splunk from one wheelbarrow, it’s convenient. but there is a limit, it seems, in 500mb in total.
sometimes it turns out that many times more logs arrive in a day.
how can i change the system? so that it not only collects data from all wheelbarrows, but also draws / visualizes it a la splank or Elasticsearch.
By the way, I also tried the second one, but something "didn't work" with it.
are there any alternatives? preferably, free of charge)
thanks for the answer!

Answer 1

graylog