1. A method by a computer comprising: partitioning a log stream into records having defined intervals; and for each of the records, performing: selecting a template from among a set of templates in a templates index repository based on an identifier for the record being associated in the templates index repository with the template; identifying an attribute contained in the record based on the template; and storing the attribute associated with an identifier for the record and an identifier for the template in an attributes index repository.