use strict;
use warnings;
use Data::Dump qw"pp";
use English;
 
my %HoA;
my @AoA;
 
while (<DATA>) {
  
  if (my ($id,$fromto)=/: (\w+): ((?:from|to)=<.*?>),/ ){
    $HoA{$id}=[$PREMATCH,$fromto,$POSTMATCH];
    @AoA[$.]=[$PREMATCH,$id,$fromto,$POSTMATCH];
  }else {
    warn "Couldn't parse <<<$_>>> at line $.";
  } 
}
 
pp(\%HoA);
pp(\@AoA);
 
__DATA__
Dec 8 08:49:21 b.mx.sonic.net sm-mta18242: jB8GnCuK018242: from=<cj@or
+eilly.com>, size=10731, class="0", nrcpts=2, msgid=<E4461FEB-1B74-461
+2-80DC-3A39B04D89B1@oreilly.com>, proto=ESMTP, daemon=MTA, relay=mwes
+t.oreilly.com 209.204.146.24
Dec 8 08:49:21 b.mx.sonic.net sm-mta18528: jB8GnCuK018242: to=<mkirk@c
+orp.sonic.net>,<dane@corp.sonic.net>, delay=00:00:00, xdelay=00:00:00
+, mailer=esmtp, pri=160731, relay=lds.sonic.net. 208.201.249.231, dsn
+=2.0.0, stat=Sent (jB8GnLpC004736 Message accepted for delivery)

[download]

both data-lines have the same ID so maybe you don't want a HoA but a AoA

OUTPUT:

{
  jB8GnCuK018242 => [
        "Dec 8 08:49:21 b.mx.sonic.net sm-mta18528",
        "to=<mkirk\@corp.sonic.net>",
        "<dane\@corp.sonic.net>, delay=00:00:00, xdelay=00:00:00, mail
+er=esmtp, pri=160731, relay=lds.sonic.net. 208.201.249.231, dsn=2.0.0
+, stat=Sent (jB8GnLpC004736 Message accepted for delivery) \n",
      ],
}
[
  undef,
  [
    "Dec 8 08:49:21 b.mx.sonic.net sm-mta18242",
    "jB8GnCuK018242",
    "from=<cj\@oreilly.com>",
    " size=10731, class=\"0\", nrcpts=2, msgid=<E4461FEB-1B74-4612-80D
+C-3A39B04D89B1\@oreilly.com>, proto=ESMTP, daemon=MTA, relay=mwest.or
+eilly.com 209.204.146.24\n",
  ],
  [
    "Dec 8 08:49:21 b.mx.sonic.net sm-mta18528",
    "jB8GnCuK018242",
    "to=<mkirk\@corp.sonic.net>",
    "<dane\@corp.sonic.net>, delay=00:00:00, xdelay=00:00:00, mailer=e
+smtp, pri=160731, relay=lds.sonic.net. 208.201.249.231, dsn=2.0.0, st
+at=Sent (jB8GnLpC004736 Message accepted for delivery) \n",
  ],
]

[download]

Cheers Rolf

UPDATE: better add a chomp after the while ...

UPDATE: adding a space to the regex helps catching additional mailadresses   my ($id,$fromto)=/: (\w+): ((?:from|to)=<.*?>), /;

but be aware that you have to be sure about the format of your logs, otherwise you need a parser for mailadresses which isn't trivial

In reply to Re: log file split into HoA by LanX
in thread log file split into HoA by vboy1997

Title:
Use:  <p> text here (a paragraph) </p>
and:  <code> code here </code>
to format your post, it's "PerlMonks-approved HTML":


  • Posts are HTML formatted. Put <p> </p> tags around your paragraphs. Put <code> </code> tags around your code and data!
  • Titles consisting of a single word are discouraged, and in most cases are disallowed outright.
  • Read Where should I post X? if you're not absolutely sure you're posting in the right place.
  • Please read these before you post! —
  • Posts may use any of the Perl Monks Approved HTML tags:
    a, abbr, b, big, blockquote, br, caption, center, col, colgroup, dd, del, details, div, dl, dt, em, font, h1, h2, h3, h4, h5, h6, hr, i, ins, li, ol, p, pre, readmore, small, span, spoiler, strike, strong, sub, summary, sup, table, tbody, td, tfoot, th, thead, tr, tt, u, ul, wbr
  • You may need to use entities for some characters, as follows. (Exception: Within code tags, you can put the characters literally.)
            For:     Use:
    & &amp;
    < &lt;
    > &gt;
    [ &#91;
    ] &#93;
  • Link using PerlMonks shortcuts! What shortcuts can I use for linking?
  • See Writeup Formatting Tips and other pages linked from there for more info.