Logstash parse windows event nxlog

If you know what the field names are going to be then you could do something like this. If the field names are unknown I do not think there is an unambiguous way to parse the message.