Spent hours writing a grok/regex for emails arriving in exim, defo sharing this once it's all done, don't want anyone else to go through my pain