Hi,
is it safe to use the docker syslog logging Driver with the tcp Input plugin and the persistent Queue enabled in logstash? Do logging Events in case of back pressure (Input Queue full) correctly prevent the syslog to stop sending Events (and thus losing them) and also take care that the buffers on the application side don't get overloaded?
How about using filebeat, is this perhaps the better way for handling such Scenarios?
Regards,
Rok