split log according to specific column