Hi all, I'm looking for a syslog server to centralise our many (mainly Windows) servers. There seems to exists two real alternatives: rsyslog and syslog-ng. A comparison (from 2008) exists here: http://www.rsyslog.com/doc/rsyslog_ng_comparison.html but I prefer to ask here for real experience.
So my questions are:

• what syslog server are you using?
• have you compared syslog-ng and rsyslog features before choosing one? and when?
• do you feel there are limitations, maybe blocking limitations in the one you use?
• what do you use (if you use any) web interface for visualization? Do you any aggregation/correlation software for your logs? And which?

As you see, my idea is to use a syslog server to centralise logs, but also to provide a web interface for visualisation and even more if i found great software.

I'm waiting for your comments :)