> Have you experience perhaps of rsyslog and how does it compare with gentoo's > default syslog-ng?
The native/internal modules of db writes and alerting of rsyslog sound promising. There's a comparison here: http://www.rsyslog.com/doc-rsyslog_ng_comparison.html Portage isn't in sync with rsyslogs development tree yet. Latest in v3-stable is 3.20.0, which appears to build OK. I don't know if there are any gentoo specific gotchas, not much experience with it yet....everything seems fine... .