I agree This flow shows workflow for log collection, aggregation, store and display.
Ingest logs from folders. Listen for syslogs on UDP port. Merge syslogs and drop-in logs and persist merged logs to Solr for historical search. Dashboard: stream real-time log events to dashboard and enable cross-filter search on historical logs data https://community.hortonworks.com/articles/961/a-collection-of-nifi-examples.html
... View more