The key question is - can rsyslog log to a text file in an *unmodified* format? If so, the approach should work. It will associate the logs with the source IP and also consume 1 node license for each log source
the process is outlined in the evaluation guide - see the last section
http://www.solarwinds.com/documentation/LEM/Docs/LEM_Evaluation_Guide.pdf