title: How should I handle remote logging with systemd?
body: <p>I run multiple CoreOS instances on Google Compute Engine (GCE). CoreOS uses systemd's journal logging feature. How can I push all logs to a remote destination? As I understand, systemd journal doesn't come with remote logging abilities. My current work-around looks like this:</p>
  
  <pre><code>journalctl -o short -f | ncat &lt;addr&gt; &lt;ip&gt;
  </code></pre>
  
  <p>With <a href="https://logentries.com">https://logentries.com</a> using their <a href="https://logentries.com/doc/input-token/">Token-based input via TCP</a>:</p>
  
  <pre><code>journalctl -o short -f | awk '{ print "&lt;token&gt;", $0; fflush(); }' | ncat data.logentries.com 10000
  </code></pre>
  
  <p>Are there better ways?</p>
  
  <p><strong>EDIT:</strong> <a href="https://medium.com/coreos-linux-for-massive-server-deployments/defb984185c5">https://medium.com/coreos-linux-for-massive-server-deployments/defb984185c5</a></p>