[Blind-sysadmins] Log analysis and event correllation

Has anyone had experience with large-scale log analysis using ELK, Greylog, or something similar? Anything that I should know in terms of accessibility? I'm already pretty familiar with Splunk. Chris