Trying to parse by filebeat JSON-log like:
{
"Date": "2020-02-28T07:16:32.140133Z",
"Level": "Trace",
"Message": "SLOW QUEUE MSG [{queue}]: {message} - {elapsed}ms. Q: {prevQueueCount}/{curQueueCount}.",
"EventProperties": {
"queue": "StorageWriterQueue",
"message": "WritePrepares",
"elapsed": 1685,
"prevQueueCount": 0,
"curQueueCount": 0
}
}
Output gives EventProperties.queue EventProperties.elapsed as stand-alone fields
Is there any way to set this field values into
"Message": "SLOW QUEUE MSG [{queue}]: {message} - {elapsed}ms. Q: {prevQueueCount}/{curQueueCount}.",
to get:
"Message": "SLOW QUEUE MSG ["StorageWriterQueue"]: "WritePrepares" - 1685ms. Q: 0/0.",