How to split the field in Kibana?

Hi all!
I have the message field in Kibana like this:

I want to convert this field in something like:

message.app: rbac
message.args: []
message.commandTag: null
message.fields.time: 330709
etc

Kibana version: 7.7.1
Flebeat version: 7.6.2

Thanks for your help!
Danil

The best way is to send your message on ingest time through the json processor of your ingest node pipeline.

Thanks a lot for your help!

1 Like