日志采集太多太乱？最小可用字段规范与正则提取

const line = '[2025-10-23 18:20:01] ERROR api-gateway trace=abc-123 user=42 msg="下单失败"';
const re = /\[(.*?)\]\s+(\w+)\s+(\S+)\s+trace=(\S+)\s+.*msg=\"(.*?)\"/;
const m = line.match(re);
const doc = {
  ts: m[1], lvl: m[2], svc: m[3], traceId: m[4], msg: m[5]
};
console.log(JSON.stringify(doc));

{
  "ts": "2025-10-23 18:20:01",
  "lvl": "ERROR",
  "svc": "api-gateway",
  "traceId": "abc-123",
  "msg": "下单失败"
}