I currently have a Fleet module set up to ingest IIS logs into Kibana.
Within the logs they contain the filed URL.Query, which holds alot of information.
What i would like to do is to turn all of the parameters inside the URL.Query into fields themselves. For instance
I would like to be able to see "gameId" and "GameSessionId" as fields.
I can see a similar question posted on
However there is no answer on this. Could someone please provide some information or advice, thank you :).
Not sure if this is important, but the agent.type is "filebeats"