{
  "description" : "zeek.opcua_binary_opensecure_channel",
  "processors" : [
    { "remove":   { "field": ["host"],                                                                                                 "ignore_failure": true } },
    { "json":     { "field": "message",			                "target_field": "message2",                                    "ignore_failure": true} },
    { "rename":   { "field": "message2.opcua_link_id",                  "target_field": "opcua.link_id",                               "ignore_missing": true } },
    { "rename":   { "field": "message2.server_proto_ver",               "target_field": "opcua.server.protocol.version",               "ignore_missing": true } },
    { "rename":   { "field": "message2.sec_token_sec_channel_id",       "target_field": "opcua.security_token.security_channel_id",    "ignore_missing": true } },
    { "rename":   { "field": "message2.server_proto_ver",               "target_field": "opcua.security_token.id",                     "ignore_missing": true } },
    { "rename":   { "field": "message2.server_proto_ver",               "target_field": "opcua.security_token.created",                "ignore_missing": true } },
    { "rename":   { "field": "message2.server_proto_ver",               "target_field": "opcua.security_token.revised",                "ignore_missing": true } },
    { "rename":   { "field": "message2.server_proto_ver",               "target_field": "opcua.server.nonce",                          "ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}