This olympic event should be cancelled. The whole methodology is flawed and assumes way too many things.

For us, logback+gelf was the right solution. Get the logs off the box and keep them intact. https://github.com/mp911de/logstash-gelf