You need 2 packages:

• logcheck
• logcheck-database

/etc/logcheck/logcheck.conf

ADDTAG="yes"

/etc/cron.d/logcheck

*/20 * * * *       logcheck    if [ -x /usr/sbin/logcheck ]; then nice -n10 /usr/sbin/logcheck; fi

http://logcheck.org/