I have to make a flume topology in which I can divide the events based on
some header value to different sinks through selectors.

My logging script is implemented in php, and this php script writes to
syslog which then forwards the events to a pre-configured flume node.

Could anyone tell me which is better between avro and syslog sources, in
terms of performance,implementation and understanding?
And is it even possible to write avro messages through php?

NEW: Monitor These Apps!
elasticsearch, apache solr, apache hbase, hadoop, redis, casssandra, amazon cloudwatch, mysql, memcached, apache kafka, apache zookeeper, apache storm, ubuntu, centOS, red hat, debian, puppet labs, java, senseiDB