I'm wanting to set up a centralised log, initially mostly for network device logs (eg DHCP, DNS, routers, WiFi), and have been toying with the idea of ELK.

My concerns at the moment are because I'd use it for network traffic, it'd be always on, so a cheap, low power device. Probably something dedicated. However, looking at the suggested hardware, I'm not sure if I have anything suitably powerful. But mostly what I've read so far is enterprise context, and dev/test PoC kind of setups rather than "enthusiast".

If anyone is doing this kind of thing already, what kind of hardware are you using for it? Does it work?