Parse::Syslog looks like a good start. Unfortunately, I have no experience with this. So I couldn't tell you how well it works.