Thank you for you answer.
So the way to go is to store the whole log message then use extractor or pipelines to generate a message with the value I want in the source ID field, right ?
Is there any difference between extractors and pipelines ?
Is the pipeline used in the post linked previously correct ?