Extract filed from specific message

Here is a similar request. Use grok, and try to complete this by yourself.