How to split the field in Kibana?

[testisnullus (Danil Savchenko)]

Hi all!
I have the message field in Kibana like this:

I want to convert this field in something like:

message.app: rbac
message.args: []
message.commandTag: null
message.fields.time: 330709
etc

Kibana version: 7.7.1
Flebeat version: 7.6.2

Thanks for your help!
Danil

[Felix_Roessel]

The best way is to send your message on ingest time through the json processor of your ingest node pipeline.

JSON processor | Elasticsearch Guide [7.13] | Elastic

[testisnullus (Danil Savchenko)]

Thanks a lot for your help!