I just have a server dedicated to syslog and have rsyslog running on everything else.