We've had great luck with our switch from 'write everything to files' to Graylog. We've got a bunch of different microservices and having all of the logs in one searchable place has been a boon. That and our switch to Kubernetes had made our logfiles harder to get at.