Rename field after extracting it from another field

Please show an example of a processed event. Use a stdout { codec => rubydebug } output to dump the raw event.