What's the best centralized syslog viewing tool for *nix out there

I'm using Loganalyzer with rsyslog, and it seems to work ok. The web frontend's a bit clunky, but does the job.


I like Splunk myself, not cheap though.


Not tried it, but logstash sounds like it will do what you want:

http://code.google.com/p/logstash/

The license is New BSD.