Why use a http()-based destination in syslog-ng?
Logging is not just syslog anymore. Still, many syslog-ng users stick to using one of the syslog protocols for log transport and flat files for log storage. While most SIEMs and log analytics tools can receive syslog messages or read them using their own agents, in most cases, you can use the http() destination of syslog-ng as well to send logs to them. You gain extreme performance and an architecture that is easier to maintain.
Read more at https://www.syslog-ng.com/community/b/blog/posts/why-use-a-http–based-destination-in-syslog-ng
