Changing the normalization would be a feature request to Support.
You can setup LEM to collect the raw messages, take a look here:
Configure your LEM appliance for log message storage and nDepth search
Changing the normalization would be a feature request to Support.
You can setup LEM to collect the raw messages, take a look here:
Configure your LEM appliance for log message storage and nDepth search