quorum-test-network/logstash/pipeline/20_besu.conf

filter {
  if [service_name] == "besu" {
    json {
      source => "message"
    }
    date {
      match => [ "timestamp" , "ISO8601" ]
      remove_field => [ "timestamp" ]
    }
  }
}