Well since I'm not using Suse10 I can't comment on the exact config of syslog, but I can say this the first time I did a multi-server install they were some key things that I missed.
Make sure you read through the "Zimbra NE Multi-Server Install.pdf" It says NE version but its the same as the OSS version.
Namely making sure the ssh keys are copied to each server, that both servers know about each, and the syslog is running. Check the /var/log/syslog file on the main box and see if it grabbing the status of the other server.
Code:
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: antispam: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: antivirus: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: ldap: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: logger: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: mailbox: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: mta: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: snmp: Running
May 18 13:46:04 mail zimbramon[3303]: 3303:info: 2007-05-18 13:46:01, STATUS: mail.xxx.com: spell: Running
May 18 13:46:11 mail-mta zimbramon[13375]: 13375:info: 2007-05-18 13:46:01, STATUS: mail-mta.xxx.com: antispam: Running
May 18 13:46:11 mail-mta zimbramon[13375]: 13375:info: 2007-05-18 13:46:01, STATUS: mail-mta.xxx.com: antivirus: Running
May 18 13:46:11 mail-mta zimbramon[13375]: 13375:info: 2007-05-18 13:46:01, STATUS: mail-mta.xxx.com: mta: Running
May 18 13:46:11 mail-mta zimbramon[13375]: 13375:info: 2007-05-18 13:46:01, STATUS: mail-mta.xxx.com: snmp: Running
You want to keep anti-virus on the mailbox, though you can turn anti-spam off.
If you're not seeing that, google the correct options for syslog for suse, then restart the syslog daemon on the edge box, and you should see any new entries appear on both systems. You can also check port 514 (syslog port) and see if any data is coming or going.