extract severity from log lines