{
  "description" : "zeek.opcua_binary_read_nodes_to_read",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_read_nodes_to_read" } },
    { "remove":   { "field": ["host"],											"ignore_failure": true } },
    { "json":     { "field": "message",					"target_field": "message2",			"ignore_failure": true } },
    { "rename":   { "field": "message2.nodes_to_read_link_id",	"target_field": "opcua.nodes_to_read_link_id",		"ignore_missing": true } },
    { "rename":   { "field": "message2.node_id_encoding_mask",	"target_field": "opcua.node_id_encoding_mask",		"ignore_missing": true } },
    { "rename":   { "field": "message2.node_id_numeric",	"target_field": "opcua.node_id_numeric",		"ignore_missing": true } },
    { "rename":   { "field": "message2.attribute_id",		"target_field": "opcua.attribute_id",			"ignore_missing": true } },
    { "rename":   { "field": "message2.attribute_id_str",	"target_field": "opcua.attribute_id_string",		"ignore_missing": true } },
    { "rename":   { "field": "message2.data_encoding_name_idx",	"target_field": "opcua.data_encoding_name_index",	"ignore_missing": true } },
    { "rename":   { "field": "message2.data_encoding_name",	"target_field": "opcua.data_encoding_name",		"ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}
