I used SQLite to analyze web server logs at my last job (devops at Xero). SQLite supports in memory databases which are very fast. I'd parse a bucket of logs into a table, then run some queries against them and write the results into Graphite. The results ended up on the ops wall, and generating another data point was one more SQL query in a config file away. Wonder if they're still using it.