{
  "description" : "zeek.opcua_binary_create_subscription",
  "processors" : [
    { "set": { "field": "event.dataset", "value": "opcua_binary_create_subscription" } },
    { "remove":   { "field": ["host"],                                                                                              "ignore_failure": true } },
    { "json":     { "field": "message",			                 "target_field": "message2",		                    "ignore_failure": true } },
    { "rename":   { "field": "message2.opcua_link_id",                   "target_field": "opcua.link_id",                           "ignore_missing": true } },
    { "rename":   { "field": "message2.requested_publishing_interval",   "target_field": "opcua.publish_interval",                  "ignore_missing": true } },
    { "rename":   { "field": "message2.requested_lifetime_count",        "target_field": "opcua.lifetime_count",                    "ignore_missing": true } },
    { "rename":   { "field": "message2.requested_max_keep_alive_count",  "target_field": "opcua.max_keepalive",                     "ignore_missing": true } },
    { "rename":   { "field": "message2.max_notifications_per_publish",   "target_field": "opcua.max_notifications",                 "ignore_missing": true } },
    { "rename":   { "field": "message2.publishing_enabled",              "target_field": "opcua.publish_enabled",                   "ignore_missing": true } },
    { "rename":   { "field": "message2.priority",                        "target_field": "opcua.priority",                          "ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}