How to reindex logs and use them ?

[H4xl0r]

Hey there,
i love the projekt and get deeper into it... but im new to elastic and kibana and all that
so for now i got my openwrt logs in security onion via zeek as logs.
Those are looking like this (in this case banIP):

[23617.539606] banIP/fwd-lan/reject/oisdbigv4: IN=br-lan.1 OUT=wan MAC=******* SRC=192.168.1.97 DST=204.79.197.*** LEN=52 TOS=0x00 PREC=0x00 TTL=127 ID=44976 DF PROTO=TCP SPT=61204 DPT=443 WINDOW=65535 RES=0x00 SYN URGP=0

how can i reindex or whatever the real_message to extract those infos and order them to a banIP section like:
banIP

• IN
• OUT
• MAC
• DST