The
Dark Side of Regular Expressions describes troubleshooting performance
issues with regular expressions. The scenario is not syslog-related,
but helpful nonetheless.
Kernighan
& Pike article in Dr. Dobbs' Journal: requires payment,
and I'm not sure about the value for money it provides (if you've read
it and would like to send me
your opinion, I'll post it here).