SIEM with Graylog

http://docs.graylog.org/en/3.0/pages/extractors.html
with extractors I can normalize the logs ??