Hi,
you may want to take a look at http://www.igniterealtime.org/community/message/148830 - the XSL there is for the (patched) Spark conversation history and thus not usable for the the audit log but it shows the way one could use.
I would never merge the single files into one big file as this makes everything slow and one can no longer handle it.
LG