{
  "description" : "zeek.opcua_binary_activate_session",
  "processors" : [
    { "remove":   { "field": ["host"],                                                                                  "ignore_failure": true } },
    { "json":     { "field": "message",			               "target_field": "message2",		        "ignore_failure": true} },
    { "rename":   { "field": "message2.opcua_link_id",                 "target_field": "opcua.link_id",                 "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_type_id_namespace_idx", "target_field": "opcua.namespace_index",         "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_type_id_encoding_mask", "target_field": "opcua.encoding_mask",           "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_type_id_numeric",       "target_field": "opcua.identifier_numeric",      "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_type_id_str",           "target_field": "opcua.identifier_string",       "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_encoding",              "target_field": "opcua.encoding",                "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_policy_id",             "target_field": "opcua.policy_id",               "ignore_missing": true } },
    { "rename":   { "field": "message2.ext_obj_user_name",             "target_field": "opcua.user_name",               "ignore_missing": true } }, 
    { "rename":   { "field": "message2.ext_obj_password",              "target_field": "opcua.password",                "ignore_missing": true } },
    { "rename":   { "field": "message2.server_nonce",                  "target_field": "opcua.server_nonce",            "ignore_missing": true } },
    { "pipeline": { "name": "zeek.common" } }
  ]
}