Filtering in Kibana maybe query dsl?

Is message_field analyzed? Could you provide the mapping for it?

It should just be a matter of doing something like message_field:pass if it is analyzed.