You can send parameters to the event from the Syslog Parser using standard regex capture groups.
For example regex
.*SPANTREE-2-BLOCK_BPDUGUARD: (.*)
Would send the rest of the message (what gets captured inside the brackets) to the event.
Configure the parameters to 1, and handle the rest in EPP/action.