[syslog-ng] log reporting

Anyone using scripts (like cislog) for reporting on your logs? Anyone using cislog 1.2? If so, can you help me with getting my log format to match up with what is expected? I have SEC running against pipes but wouldn't mind something like cislog to run against yesterday's logs counting and reporting on what is found. Possibly catching things my SEC rules aren't accounting for...