Yeah, this would be nice if the syslog messages would be send by the vc!
But i also haven't found a solution yet. I think this would be a feature request.
It should give i feature like "dynamic proxy" for radius authentication.
It's very unsatisfying if you have 400+ folders on your syslog server for every ap.