I am using Splunk, but trying to change to an open-source software; what I need is something that reads in "real-time" an archive, it's not exactly a log, it's actually data itself (there is a lot of data, by the way), stores this data/log for a long time (more than 2 years), has a pretty easy way to search the data read (so some search language where I can search by IP for example), and a way to connect to the software, where I can search by API.