Nice post by Target outlining how they leverage streaming log activity. Includes samples.