Perhaps you'd like to supply us with some of your data (remove any sensitive information, please) and/or any code you've written while attempting this.

What are you really trying to do? Clean some logs for visual inspection? Process the log files for statistics? Look for anomalies? Isolate usage patterns?

In our environment, sudo logs to syslog and we have tools for analyzing the syslog files.

-sauoq
"My two cents aren't worth a dime.";