I have some queries regarding persistent storage of application logs and cf
component logs .
As per my understanding
-->For application logs:
we can send the application logs to doppler with help of metron agent and
further stream using traffic controller (User Side).
-->For CF component syslog:
We can send cf component syslog via metron to custom syslog endpoint
(followed by parsing and other mining stuff)
On the operator side how can we store "Application logs for all the
applications" to a persistent storage??
If i look at firehose (or using noaa to get all the logs), it is more like
pulling model from end component side so if components before it are slow
in sending logs then there will be buffers .
Application logs are distributed on different doppler nodes based on AZ of
metron and doppler itself , so is there a need to implement something in
between doppler and traffic controller to push all the application logs ??