Matt Sacks from Reunion.com wrote a great article in SysAdmin magazine’s current issue with lots of technical detail about setting up Splunk as a central log host for syslog and SNMP. Unfortunately it looks like it’s only available in print. Maybe they’ll put it online once a newer issue comes out.