Incident Timeline: Extract Structured Data from Logs