type of just another field, so you can change it after peeking at the contents of the line. Or you can use tags. Or just big conditionals. If the different log lines will have different fields I'd go with different type values, probably assigned via conditionals.