The better architecture is to bring logs to a centralized place and do analysis on them that way. Your GUI tool doesn't scale for real work, particularly if the machine you are investigating logs upon has been compromised or is broken.