To read from the log files, you can configure your spout and emit per line as it read the log. The output then can be assigned to a bolt for analysis.