Turn messages into fields - querying in kibana