How to define log_format and regex[] for each dataset?

[CharlesWu]

How to determine the parameters in the demo code to get the best classification effect.

[Pinjia He]

You could check a small sample of the logs (e.g., 100) to figure out the log_format. For regex[], you could also start with some simple yet effective ones, such as IP addresses.