extract kv pairs from ci_log4net message field