Earlier quoted context omitted.
* Kibana on ElasticSearch. This is huge. You get a polished Search & Graphing UI with very little effort. * Much more approachable config. * Its clustering is easier to setup. * Eventhough logstash is a bit heavy for my taste, the whole ELK stack is really nice for aggregating server logs.
Agreed about logstash being too heavy for your app servers. It would be nice to have the functionality in a trim, native binary. As things are, one can always direct an app sever's syslog to a logging fleet running logstash (or elasticsearch running embedded logstash): http://cookbook.logstash.net/recipes/rsyslog-agent/
It looks pretty promising, but I have yet to meet anyone who uses it.
https://blog.mozilla.org/services/2013/04/30/introducing-hek...