A method implemented by a computer includes receiving a log file with log file data characterizing the operation of a system. A normalized format for the log file data is proposed. User input on the normalized format is solicited. The normalized format is set. The log file data is converted to the normalized format. A visualization application operative with the normalized format is selected. The visualization application supplies visualizations of the log file data.