• It would be great to run a user script on event in log.
  As the script parameter can be set some variable containing the id of the row in the log.
• In system logging rules need to be added prefix filter as regexp or string containment

That will help to remove some scheduled tasks. Will give more flexibility for different events.

+1
Having instant notifications for logins would be nice.

As the script parameter can be set some variable containing the id of the row in the log.

what if it would contain the whole log message in a variable (e.g. $logmessage) and also some others, like
- $logseverity: debug..crit
- $logtopic: array of all corresponding topics/subsystems

i suppose timestamp is unnecessary if the script is fired upon event occurence.