Admin doc - ingestion of log data
Write a documentation section explaining what is needed to do in order to ingest log data into the system.
First, try it on a local server and find out what is needed. Then document it.
Begin with rsyslog, but there are probably many other options.