A simple yet powerful Syslog protocol Server & Analyzer. Can be tuned to only log events under a threshold, or to directly mail and admin when another threshold value is reached. The events can be viewed by hosts, by severity, or by facility.
It can't be used as a service from Windows Server 2008 and newer due to their different security policy.