There is logstash-filter-oui. In the past I used it extensively, and it does exactly what you are asking for. Unfortunately it stopped working about the time 5.6 was released. Most likely it just needs dependencies updated. But it has been ignored so far.
1 Like