How to split the field in Kibana?

Elastic Stack Kibana
1

Hi all!
I have the message field in Kibana like this:

image
image1367×49 4.14 KB

I want to convert this field in something like:

message.app: rbac
message.args: []
message.commandTag: null
message.fields.time: 330709
etc

Kibana version: 7.7.1
Flebeat version: 7.6.2

Thanks for your help!
Danil

2

The best way is to send your message on ingest time through the json processor of your ingest node pipeline.

3

Thanks a lot for your help!