As a follow-up for this, most, if not all of our concerns are covered very well in the slide decks; Critical Syslog Tricks (That No One Seems to Know About) Part 1 and Part 2 at the conf link you provided. While not necessarily a best practices, they certainly cover a lot of the problems we were concerned with, as well as some 'gotchas' that we would have had to otherwise learn the hard way. Thanks again, @burwell ! ... View more