is it possible in LMS 3.1 to forward only audit log messages to another syslog server from CS or RME?
Sure. You can create a syslog automated action that filters on the desired messages, then sends them to another server. I wrote a Perl script posted to this forum to handle the forwarding. See this thread: