Many years ago I was thinking about logs monitoring to detect anomalies and wrote personal utility to achieve this.
Reply on news.ycombinator.com