All OS and Apps log messages to local Syslog. Local syslog forwards all messages to central facility with GrayLog2 on it, where all search/visualisation/analysis happens.

This works flawlessly for years and relatively easy to set up. Couldn't recommend it more