We should be able to watch for new log messages received by syslog-ng. https://github.com/balabit/syslog-ng We can already receive syslog messages, so maybe this is just about writing documentation?