This won't scale the way it is. Move to pushing to a MPMC queue and letting the rule processors listen and act on each log entry.
This won't scale the way it is. Move to pushing to a MPMC queue and letting the rule processors listen and act on each log entry.