Which log aggregator is optimal for highload?

Question

graylog

Tell me which log aggregator is optimal for hiolad projects, so that there is a minimum load on clients from which we collect logs. I tried graylog2 - nothing but rsyslog is needed on the client, which is very pleasing. In general, share your experience in general - sending a large amount of data via udp can somehow significantly affect the performance of the system, eat up a significant part of the resources (say, more than 4,000 lines of logs per second).

Answer 1

For HL, you can look towards logstash+redis+elasticsearch+kibana.
Your project writes logs in redis.
logstash scoops them up from there and uploads them to elasticsearch.
kibana is just a convenient web admin panel for viewing logs, bare nginx is enough for it.
In principle, if resources allow, you can directly write to logstash via udp.