1. A system, comprising: a communication interface configured to receive a log message; and a processor coupled with the communication interface and configured to: identify one or more portions of the log message to be separately extracted; and extract from each identified portion a value using an extraction rule associated with the identified portion.