Instead if sending log info direct to email and study it there, I do use Splunk (or you can use Graylog or other) as a Syslog monitor.
There can you get a much better insight of your logs. Se my Splunk - Mikrotik project here: http://forum.mikrotik.com/t/tool-using-splunk-to-analyse-mikrotik-logs-3-3-graphing-everything/121810/1