i think you shouldn’t use the logs in this way… it sounds pretty strange to me, and the scalability may be a problem too
What about the connection tracking, under Firewall menu? Still not very sexy solution, but you could get it with web requests.
As an advice, i suggest you to use zeroshell only for its network purposes and manage your production data on another server