Paste 3-5 real sample lines — synthetic examples miss the weirdness of real logs. Ask for named groups; they make the extracted data self-documenting.