On Mon, 2010-06-07 at 17:15 -0400, John Mills wrote: > How have other folks dealt with the problem of capturing somewhat > volatile test data using 'syslog-ng'? General suggestions and > approaches > welcome. > > don't use it. I've used perl to sort remote syslog hosts and then I converted it to C. It scaled fairly well.