It might help to know that you can log to both servers (MARS & CiscoWorks) concurrently from the switch. Simply add an extra "logging host x.x.x.x" command to the switch, where x.x.x.x is the IP for the MARS appliance. You can do this for each destination log server you have, though I'm not sure what the limit of entries is.
As Michael pointed out, configuring two syslog destinations on your switch is possible, and allows the switch to send to both CiscoWorks and CS-MARS simultaneously. This affords the safety that should one system be down, the other system will continue to receive syslog events from the switches. Should you not wish to configure two logging destinations on your switch, you could configure your switches to send their syslogs to CS-MARS and configure CS-MARS to relay the received syslog messages to CiscoWorks. This options is outlined in the CS-MARS user guide:
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
[toc:faq]Introduction:This document describes details on how NAT-T
works.Background:ESP encrypts all critical information, encapsulating
the entire inner TCP/UDP datagram within an ESP header. ESP is an IP
protocol in the same sense that TCP and UDP are I...