What's your remit and what's your budget allowance
We log every log subscription ( unless its an unused feature ) and also collect data via SSH HTTPs connections
Ran out of budget on the LDAP logs - and really needed them the other day to analyse a strange stall in rewrite queries but not accept queries
Single Log Line is OK on a basic level - and should allow filtering out log lines from other subscriptions
Better off with a custom log consolidator + generate other metrics + log what you don't purposely filter out.
Depends on what you are analysing / detecting.
