I know this is also copied over from PayloadRegexDecoder, but I'm wondering if the `else` isn't a mistake in both places. It reads to me like we're supporting a severity value only if we *don't* capture a timestamp, which seems weird? Am I reading correctly? Is that expected behavior?