{
  "description" : "zeek.opcua_binary_get_endpoints_description",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_get_endpoints_description" } },
    { "remove":   { "field": ["host"],												"ignore_failure": true } },
    { "json":     { "field": "message",					"target_field": "message2",				"ignore_failure": true } },
    { "rename":   { "field": "message2.endpoint_description_link_id",	"target_field": "opcua.endpoint_description_link_id",	"ignore_missing": true } },
    { "rename":   { "field": "message2.application_uri",		"target_field": "opcua.application_uri",		"ignore_missing": true } },
    { "rename":   { "field": "message2.endpoint_uri",			"target_field": "opcua.endpoint_uri",			"ignore_missing": true } },
    { "rename":   { "field": "message2.product_uri",			"target_field": "opcua.product_uri",			"ignore_missing": true } },
    { "rename":   { "field": "message2.encoding_mask",			"target_field": "opcua.encoding_mask",			"ignore_missing": true } },
    { "convert":  { "field": "opcua.encoding_mask",                     "type": "string",
 "ignore_missing": true } },
    { "rename":   { "field": "message2.locale",				"target_field": "opcua.locale",				"ignore_missing": true } },
    { "rename":   { "field": "message2.text",				"target_field": "opcua.text",				"ignore_missing": true } },
    { "rename":   { "field": "message2.application_type",		"target_field": "opcua.application_type",		"ignore_missing": true } },
    { "rename":   { "field": "message2.message_security_mode",		"target_field": "opcua.message_security_mode",		"ignore_missing": true } },
    { "rename":   { "field": "message2.security_policy_uri",		"target_field": "opcua.security_policy_uri",		"ignore_missing": true } },
    { "rename":   { "field": "message2.user_token_link_id",		"target_field": "opcua.user_token_link_id",		"ignore_missing": true } },
    { "rename":   { "field": "message2.transport_profile_uri",		"target_field": "opcua.transport_profile_uri",		"ignore_missing": true } },
    { "rename":   { "field": "message2.security_level",			"target_field": "opcua.security_level",			"ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}
