{
  "description" : "zeek.opcua_binary_read_results",
  "processors" : [
    { "remove":   { "field": ["host"],														"ignore_failure": true } },
    { "json":     { "field": "message",						"target_field": "message2",					"ignore_failure": true } },
    { "rename":   { "field": "message2.results_link_id",			"target_field": "opcua.results_link_id",			"ignore_missing": true } },
    { "rename":   { "field": "message2.level",					"target_field": "opcua.level",					"ignore_missing": true } },
    { "rename":   { "field": "message2.data_value_encoding_mask",		"target_field": "opcua.data_value_encoding_mask",		"ignore_missing": true } },
    { "rename":   { "field": "message2.data_variant_encoding_mask",		"target_field": "opcua.data_variant_encoding_mask",		"ignore_missing": true } },
    { "rename":   { "field": "message2.data_variant_data_type",			"target_field": "opcua.data_variant_data_type",			"ignore_missing": true } },
    { "rename":   { "field": "message2.data_variant_data_type_str",		"target_field": "opcua.data_variant_data_type_string",		"ignore_missing": true } },
    { "rename":   { "field": "message2.built_in_data_type",			"target_field": "opcua.built_in_data_type",			"ignore_missing": true } },
    { "rename":   { "field": "message2.built_in_data_type_str",			"target_field": "opcua.built_in_data_type_string",		"ignore_missing": true } },
    { "rename":   { "field": "message2.read_results_variant_data_link_id",	"target_field": "opcua.read_results_variant_data_link_id",	"ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}