{
  "description" : "zeek.opcua_binary_browse_response_references",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_browse_response_references" } },
    { "remove":   { "field": ["host"],													"ignore_failure": true } },
    { "json":     { "field": "message",			                        "target_field": "message2",				"ignore_failure": true } },
    { "rename":   { "field": "message2.browse_reference_link_id",               "target_field": "opcua.link_id",			"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_ref_encoding_mask",      "target_field": "opcua.reference_encoding_mask",	"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_ref_numeric",            "target_field": "opcua.reference_numeric",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_is_forward",             "target_field": "opcua.is_forward",			"ignore_missing": true } },
    { "rename":   { "field": "message2.response_ref_type_encoding_mask",	"target_field": "opcua.reference_type_encoding_mask",	"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_ref_type_namespace_idx", "target_field": "opcua.namespace_index",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_ref_type_numeric",       "target_field": "opcua.reference_type_numeric",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_ref_name",               "target_field": "opcua.reference_name",			"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_display_name_mask",      "target_field": "opcua.display_name_mask",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_display_name_locale",    "target_field": "opcua.display_name_local",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_display_name_text",      "target_field": "opcua.display_name_text",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_node_class",             "target_field": "opcua.node_class",			"ignore_missing": true } }, 
    { "rename":   { "field": "message2.browse_response_type_def_encoding_mask",	"target_field": "opcua.type_def_encoding_mask",		"ignore_missing": true } },
    { "rename":   { "field": "message2.browse_response_type_def_numeric",	"target_field": "opcua.type_def_numeric",		"ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}
