There are three types of EGO daemons. See What Symphony daemons/processes are running on my cluster?:
For Log Level of Debug or INFO, each line of the log matches following format:
<timestamp> <log level> [<pid>:<thread-id>] <logger name> <message body>
For Log Level of INFO, WARN, ERROR, FATAL, each line of the log matches following format:
<timestamp> <log level> [<pid>:<thread-id>] <logger name> <Domain> <message>
where <timestamp> is: Year-month-day Hour-Minute-Second- Millisecond. [<pid>:<thread-id>]
EGO master and slave daemons: There are two similar format of logs. Each line of the log generally matches following format:
where <timestamp> is either similar to Soam timestamp and/or self-explainatory.
System services: System services consist of internal and 3rd party daemons. Each line of the internal daemon log, generally, matches following format:
<timestamp> <log level> <message body>
Each line of the sd and rs daemon log, matches the format of soam logs. See above.
Format of 3rd party daemons do not follow a generic pattern.