Oh and it's better not to mangle logs before they hit the DB - slows things down and will make you need to add more infrastructure if you cluster logging