Why is normalizing log data important in a centralized logging setup?

$1$ point

It's difficult to analyze abnormal logs$.$

Log normalizing detects potential attacks.

The data must be decrypted before sending it to the log server.

Uniformly formatted logs are easier to store and analyze.