[syslog-ng] curious question...

[Reclo]

I'm just curious.  I've got a remote server I'd like to get logs from 
'securely'.  I was thinking of having it use syslog-ng to use TCP, then 
stunnel back to a local stunnel instance where my central log server is, 
which then drops it back off at a local port unencrypted.

Has anyone ever tried this/gotten it to work well?  Advice?  Suggetions? 
Other ideas?

Thanks!
Brian