{
  "description" : "zeek.bacnet_property",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "bacnet_property" } },
    { "remove":         { "field": ["host"],									"ignore_failure": true	} },
    { "json":           { "field": "message",			"target_field": "message2",			"ignore_failure": true  } },
    { "rename":         { "field": "message2.is_orig",          "target_field": "bacnet.is_orig",         "ignore_missing": true  } },
    { "rename":         { "field": "message2.instance_number",	"target_field": "bacnet.instance.number",	"ignore_missing": true  } },
    { "rename":         { "field": "message2.pdu_service",	"target_field": "bacnet.pdu.service",		"ignore_missing": true  } },
    { "rename":         { "field": "message2.object_type",	"target_field": "bacnet.object.type",		"ignore_missing": true  } },
    { "rename":         { "field": "message2.property",		"target_field": "bacnet.property",		"ignore_missing": true  } },
    { "rename":         { "field": "message2.array_index",	"target_field": "bacnet.array.index",		"ignore_missing": true  } },
    { "rename":         { "field": "message2.value",		"target_field": "bacnet.value",			"ignore_missing": true  } },
    { "pipeline":       { "name": "zeek.common" } }
  ]
}
