{
  "description" : "zeek.opcua_binary_diag_info_detail",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_diag_info_detail" } },
    { "remove":   { "field": ["host"],										"ignore_failure": true } },
    { "json":     { "field": "message",				"target_field": "message2",			"ignore_failure": true } },
    { "rename":   { "field": "message2.diag_info_link_id",	"target_field": "opcua.diag_info_link_id",	"ignore_missing": true } },
    { "rename":   { "field": "message2.source", 		"target_field": "opcua.source",			"ignore_missing": true } },
    { "rename":   { "field": "message2.source_str", 		"target_field": "opcua.source_string",		"ignore_missing": true } },
    { "rename":   { "field": "message2.inner_diag_level",	"target_field": "opcua.inner_diag_level",	"ignore_missing": true } },
    { "rename":   { "field": "message2.has_symbolic_id",	"target_field": "opcua.has_symbolic_id",	"ignore_missing": true } },
    { "rename":   { "field": "message2.has_namespace_uri",	"target_field": "opcua.has_namespace_uri",	"ignore_missing": true } },
    { "rename":   { "field": "message2.has_locale",		"target_field": "opcua.has_locale",		"ignore_missing": true } },
    { "rename":   { "field": "message2.has_locale_txt",		"target_field": "opcua.has_locale_txt",		"ignore_missing": true } },
    { "rename":   { "field": "message2.has_addl_info",		"target_field": "opcua.has_addl_info",		"ignore_missing": true } },
    { "rename":   { "field": "message2.addl_info",		"target_field": "opcua.addl_info",		"ignore_missing": true } },
    { "rename":   { "field": "message2.has_inner_stat_code",	"target_field": "opcua.has_inner_stat_code",	"ignore_missing": true } },
    { "rename":   { "field": "message2.inner_stat_code",	"target_field": "opcua.inner_stat_code",	"ignore_missing": true } },
    { "rename":   { "field": "message2.has_inner_diag_info",	"target_field": "opcua.has_inner_diag_info",	"ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}
