so it looks like I may have some free time coming up both in work and home. I may look into docker and or log stash. I feel log stash should be working already but the guy replacing me is a complete idiot.
Maybe I do logstash on the nagios server and have them run together. It is a version of SPoF but then again this is not production.