How do I created a scripted field from a message field that I already have

[bharati]

Hello,

I am new to scripted fields . I have a field "message" in my logs. I am trying to create scripted fields/customized fields for the content inside the message field. Can anyone please tell me how to create custom fields in this case. I need the content of the message field split up into individual fields.

[Christian_Dahlqvist]

You should really parse this out before you index the documents as using scripted fields moves all the processing to query time which will be slow and scale badly.