Doesn't the journald component of systemd do this? I seem to recall it was much reviled for exactly the problems you point out - that it is harder to work with than plaintext logs.