Visual syslog server is a very straightforward and light weight syslog option that focuses on a real time approach. I run it on a 14 04lts vm with 2 5g ram and two cores. Has yet to fall over.