To get all of the syslog data distributed we used the open-source syslog-ng package from Balabit IT, with the “spoof source” directive enabled.