We have a feature to do remote logging, called “log collation”. This runs
either as part of traffic_server itself, or using the stand-alone collector,
traffic_sac. The issues with log collation are
* Not well supported, no development / fixes are done on critical bugs
* It has some severe shortcomings, such as orphaned logs never being
collected
* We feel that there are better out-of-band transports for logging, and
we shouldn’t be in this business
Some options for collecting logs include
* syslog-ng
* Apache Flume
* Splunk (commercial)
* etc.
The Jira for this is
https://issues.apache.org/jira/browse/TS-3168
Unless we hear otherwise within 1 week, this feature will be removed for 6.0.0.
If there’s concerns about upgrades from 5.x to 6.0, please voice your concerns
asap. We could consider making this a deprecation in 6.0, and removal for 7.0,
but only if people really need this feature during an upgrade period. v6.0.0 is
schedule for release in ~july time frame.
— Leif