You could just have an sshable account without shell privileges, only able to run grep or some small set of controlled utilities and with filesystem access restricted to read only access to the log sirs.

Anyone who needs access could remotely run a command that would return the results of whatever permitted query they submitted.