Arlogd provides remote logging. A daemon on a client host watches all fifo's in some directory.
Anything written to a fifo is appended to a corresponding file on the loghost.
It is not necessary to change or reconfigure logging applications ; you can just replace a log by (a symlink to) a fifo.
KISS is a kernel-side host-oriented security tool, which may bring you file integrity checking, file and process hiding and actions handling on special internal events (using a tiny scripting language).
logconf is a centralised configuration control for logging software. Configurations are included for syslog-ng (multi-host), logrotate, and logwatch; others will be added in future.
Adding a new host is as simple as adding a word to a config file.