Something

Cluster Member Apache and Syslog-NG config:

# httpd.conf

...
#CustomLog "|/bin/logger -t httpd" analog   #used to it this way
# use mkfifo to make the fifo :)
CustomLog "/var/log/apache.pipe" analog
...

# Syslog-ng on the cluster member

source src {

...
pipe("/var/log/apache.pipe");
...

}

## Central Syslog-NG config that sorts by vhost:

options { sync (0);

          time_reopen (10);
          log_fifo_size (2000);
          long_hostnames (off);
          use_dns (yes);
          dns_cache(yes);
          use_fqdn (no);
          create_dirs (yes);
          keep_hostname (yes);
        };

source s_sys { internal(); udp(); };

destination d_www.iowasexoffender.com  { file("/usr/local/awstat_logs/www.iowasexoffender.com" owner(root) group(root) perm(0644) dir_perm(644)create_dirs(yes) );};
filter f_www.iowasexoffender.com         { match("httpd: www\.iowasexoffender\.com "); };
log { source(s_sys); filter(f_www.iowasexoffender.com); destination(d_www.iowasexoffender.com); };

destination d_www.traveliowa.com  { file("/usr/local/awstat_logs/www.traveliowa.com" owner(root) group(root) perm(0644) dir_perm(644)create_dirs(yes) );};
filter f_www.traveliowa.com         { match("httpd: www\.traveliowa\.com "); };
log { source(s_sys); filter(f_www.traveliowa.com); destination(d_www.traveliowa.com); };

destination d_eservices.iowa.gov  { file("/usr/local/awstat_logs/eservices.iowa.gov" owner(root) group(root) perm(0644) dir_perm(644)create_dirs(yes) );};
filter f_eservices.iowa.gov         { match("httpd: eservices\.iowa\.gov"); };
log { source(s_sys); filter(f_eservices.iowa.gov); destination(d_eservices.iowa.gov); };

destination d_www.amberalertiowa.com  { file("/usr/local/awstat_logs/www.amberalertiowa.com" owner(root) group(root) perm(0644) dir_perm(644)create_dirs(yes) );};
filter f_www.amberalertiowa.com         { match("httpd: www\.amberalertiowa\.com "); };
log { source(s_sys); filter(f_www.amberalertiowa.com); destination(d_www.amberalertiowa.com); };

destination d_www.iowadnr.com  { file("/usr/local/awstat_logs/www.iowadnr.com" owner(root) group(root) perm(0644) dir_perm(644)create_dirs(yes) );};
filter f_www.iowadnr.com         { match("httpd: www\.iowadnr\.com "); };
log { source(s_sys); filter(f_www.iowadnr.com); destination(d_www.iowadnr.com); };


...