Create a new Field based on delimiter

HI,
Im very new to ELK.
I have a log like this
Message-Id: 34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAPbYwAAAAAAAUmKABcugLi@gmail.com
MIME-Version: 1.0
From: hasdgs@gmail.com
Reply-To: hasdgs@gmail.com
To: dswifka@yahoo.com
Subject: [ Resources For You] You've been assigned to the request "Education Assistance Request - Portal
Date: Fri, 19 Apr 2019 17:18:26 -0000
............................ and more

I want to parse field based on value after ":" from the log..
Need output like
{
"MessgeID": [
[
"34b89892.AMMAADZy0R0AAAAAAAAAAGzbDQ4AAP-ybYwAAAAAAAUmKABcugLi@gmail.com"
]
],
"MIMEVersion": [
[
"1.0"
]
],
"from": [
[
"hasdgs@gmail.com"
]
],
"ReplyTo": [
[
"hasdgs@gmail.com"
]
]
} and all other fields.. Is it posssible

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.