We parse JSON and you can search your own fields.
We do not have syslog yet or code libraries. We have an agent that ships logs today via secure web socket.
Everything is encrypted in transit, end-to-end. We haven't not researched into encryption at rest on EC2 yet.