{
  "description" : "zeek.opcua_binary_get_endpoints_user_token",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_get_endpoints_user_token" } },
    { "remove":   { "field": ["host"],                                                                                                         "ignore_failure": true } },
    { "json":     { "field": "message",			                 "target_field": "message2",		                               "ignore_failure": true } },
    { "rename":   { "field": "message2.user_token_link_id", 	         "target_field": "opcua.user_token_link_id",		               "ignore_missing": true } },
    { "rename":   { "field": "message2.user_token_type",                 "target_field": "opcua.user_token_type",                              "ignore_missing": true } },
    { "rename":   { "field": "message2.user_token_sec_policy_uri",       "target_field": "opcua.user_token_security_policy_uri",               "ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}
