#logstash

longest looks like aspera, which has a bunch of different messages types with their own magic.

postfix is similar - every postfix plugin has a different logging format

and there can be several different formats per plugin

it's so ugly

at least you can sparate them by syslog program ID, but it only helps a little

TBH ES itself is pretty bad

(by default, anyway)

ugh, should have fully qualified that, lest it be taken out of context. Above is in reference to logging, strictly