Central management remote eventlog

Does anyone know a good solution to centrally manage remote eventlogs of
customers?

Our customers have own servers and own domains. We can connect to them by
VPN (dial-in). We don't have permanent vpn connections. I'm looking for a
tool to collect server-health or event's from the past x-days and process
then central. It doesn't have to be real-time.

Microsoft MOM is to 'big' for this I guess. Maybe some tool from GFI or
Snare?

Thanks in advance,

Robert