I haven't seen it that often either. I like to store Apache & nginx logs as JSON so they can be parsed with tools like jq, and adding/removing fields doesn't b

I haven't seen it that often either. I like to store Apache & nginx logs as JSON so they can be parsed with tools like jq, and adding/removing fields doesn't break parsing. From JSON it is also easy to pull them into PostgreSQL (at least) in jsonb format, or parse out key elements as their own regular table fields.