I have a large number of websites that are mounted over nfs.
Everything works, apart from the logging.

I would like to be able to get real time (or near real time) access
logging.

Since multiple apache instances cannot write to the same log file, I
have the following options:

1. vlogger
Write to individual log files then combine them all later.
Very low number of open files
2. syslog-ng
Log over a tcp syslog-ng connection to a central host
3. Something else?

Number 2 seems the best way. Can anyone offer any more suggestions?

Thanks a lot in advance.