The LogPoint Compiled Normalisers can do things that are not possible in a “standard” LogPoint normaliser, which are based on Regex. Things like a “look-ahead” would be really difficult to do in Regex. Hopefully, there is already a prebuilt Compiled Normaliser for the log format you are after, for example there is a generic JSON normaliser and we recently released an XML normaliser. But if it is a commercially available log file, you should also be able to open a ticket and give it to Support who can advise or create a normaliser for you - compiled if need be.