Comment by valyala

Try VictoriaLogs [1]. It supports wide events with hundreds of fields (aka canonical logs).

[1] https://docs.victoriametrics.com/victorialogs/