How many unique message formats do you think exist in your org?
actually, how many of your messages include the time and date, and how many different ways of displaying timestamp exist in those messages?
That is why I say logs are unstructured, because all but a very few places actually have the discipline to enforce a single log structure.