You may also want to take this a different way. Rather than solving a problem with getting logs to come off of a rhel5 sever, perhaps you should tell them to get off rhel5. I have to imagine the support cost are fairly High, especially where this platform is at from supportability perspective from Red Hat.