/usr/share/logsparser/normalizers/ is in python-logsparser 0.4-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/logsparser/normalizers/Fail2ban.xml
/usr/share/logsparser/normalizers/GeoIPsource.xml
/usr/share/logsparser/normalizers/IIS.xml
/usr/share/logsparser/normalizers/LEA.xml
/usr/share/logsparser/normalizers/MSExchange2007MessageTracking.xml
/usr/share/logsparser/normalizers/RefererParser.xml
/usr/share/logsparser/normalizers/URLparser.xml
/usr/share/logsparser/normalizers/UserAgent.xml
/usr/share/logsparser/normalizers/VMWare_ESX4-ESXi4.xml
/usr/share/logsparser/normalizers/apache.xml
/usr/share/logsparser/normalizers/arkoonFAST360.xml
/usr/share/logsparser/normalizers/bitdefender.xml
/usr/share/logsparser/normalizers/cisco-asa_header.xml
/usr/share/logsparser/normalizers/cisco-asa_msg.xml
/usr/share/logsparser/normalizers/common_callBacks.xml
/usr/share/logsparser/normalizers/common_tagTypes.xml
/usr/share/logsparser/normalizers/dansguardian.xml
/usr/share/logsparser/normalizers/deny_event.xml
/usr/share/logsparser/normalizers/deny_traffic.xml
/usr/share/logsparser/normalizers/dhcpd.xml
/usr/share/logsparser/normalizers/named-2.xml
/usr/share/logsparser/normalizers/named.xml
/usr/share/logsparser/normalizers/netfilter.xml
/usr/share/logsparser/normalizers/normalizer.dtd
/usr/share/logsparser/normalizers/normalizer.template
/usr/share/logsparser/normalizers/pam.xml
/usr/share/logsparser/normalizers/postfix.xml
/usr/share/logsparser/normalizers/s3.xml
/usr/share/logsparser/normalizers/snare.xml
/usr/share/logsparser/normalizers/squid.xml
/usr/share/logsparser/normalizers/sshd.xml
/usr/share/logsparser/normalizers/symantec.xml
/usr/share/logsparser/normalizers/syslog.xml
/usr/share/logsparser/normalizers/wabauth.xml
/usr/share/logsparser/normalizers/xferlog.xml