add underscore, add some rudimentary parsing of the log line to detect IP address and HTTP status code, add reverse DNS