Get piece of message from huge message

Hello everyone,

I want to write a list of emails that are in the ES in a csv.

However the emails are inside a huge message.

The ES has a field named @request_logline and when they exist they are in the following format:

But this login tag is in a huge message.

Do you have any idea/suggestion on how I should approach this extraction?

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.