What are the best practices for syslog management? In an 8 building campus is one primary collector and one secondary collector enough? We are using syslog-ng on linux. Are there other, better methods? What about compression, backup and archiving of the logs - are there standard ways of doing this, utilities, rules? Other considerations?
