Node is perfect for this type of realtime application. We'll be using it (and/or mongrel2) at Loggly to do realtime feeds of events matching a search so people can build apps like this.

I did a Poly9 mashup when I was at Splunk which did something similar.

I yove your overlay of the events as they come in. Good work man!