For some practical examples of this kind of thing with reference to log files (or a ready-made solution, depending on what your needs are), check out the source code to logwatch, a very nicely done log scanner/reporting program written in perl. I actually got started with perl years ago learning how to tweak logwatch for my own system.