How to split the message body into 2 fields in Elasticsearch and make one field with aggregation?

Question

JSON

Good afternoon, there is a configured system that collects logs, a row from a text file is transferred to the messege field, the row looks like this "07/10/2020 08:39:59 LoadUsersFromUzd EDRPOU: 00373869, ProfileService: Financial controller
"
In the setting , you can see that this field is not aggregated and I can't build a visualization based on it.
1. You need to create the time_message and text_message fields in which the time values ​​will be "07/10/2020 08:39:59" and the log text "LoadUsersFromUzd EDRPOU: 00373869, ProfileService: Financial controller".
2. The text_message field must be able to be aggregated.
Is there such a possibility, and if so, I would be grateful for the help.

Answer 1

. The text_message field must be able to be aggregated.

how do you imagine that?
preprocess and extract aggregated data into a separate column