How to split the field in Kibana?

Hi all!
I have the message field in Kibana like this:

I want to convert this field in something like: rbac
message.args: []
message.commandTag: null
message.fields.time: 330709

Kibana version: 7.7.1
Flebeat version: 7.6.2

Thanks for your help!

The best way is to send your message on ingest time through the json processor of your ingest node pipeline.

Thanks a lot for your help!

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.