I’ve just read a nice article on syslog:
http://www.enterprisenetworkingplanet.com/netos/article.php/3521481
It’s a good intro, though it again mentions syslog-ng as the only secure alternative. I guess we need to work a little on that (OK, rsyslog is not yet ready for prime time… but we are approaching;))