Hey, some weeks ago I wrote a Docker logging plugin that acts as an oklog forwarder: oklog-docker-plugin. oklog makes use of a fairly straightforward format for ingesting logs: send it a line with some predefined fields and ta-da, it’ll be properly ingested. While coding the plugin, I remember considering whether I should buffer these stuff or not. My rationale was that I should probably look at the tradeoff of between immediate availability of the logs and some kind of network optimization...
