There isn't a log stored and parsed, it is direct device communication - that said, critical events are stored in the database in /opt/alarmdecoder-webapp/instance - it is a sqlite database
The code for the notifications would be in /opt/alarmdecoder-webapp/ad2web/notifications/ and the thread for the notifications is in decoder.py in the parent directory.
You can also feel free to write your own code with the provided alarmdecoder library - it is in python - you can easily connect to a socketdevice if you have ser2sock sharing your device and do your own notifications there. (documentation for library here:
http://alarmdecoder.readthedocs.org/en/latest/)
That all being said, there are already big changes coming to the notification system it is just taking time to implement everything we would like to. Some previews are: Pushover.net support, Growl server support, Prowl, Notify My Android, POSTing custom variables to a custom URL (urlencoded, json, or xml), eliminating zone spam notifications and more.
Not an employee of the company. Just here to help and keep things clean.