From 45021f475a71cfe1313cf840c4992aa974080fbc Mon Sep 17 00:00:00 2001
From: Drew Rogers <drogers@chariotsolutions.com>
Date: Mon, 1 Apr 2013 10:24:51 -0400
Subject: [PATCH] @message was missing in event, added 'Message' field to
 @message.

---
 lib/logstash/inputs/eventlog.rb | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/logstash/inputs/eventlog.rb b/lib/logstash/inputs/eventlog.rb
index ceb2785a6..2545b71a5 100644
--- a/lib/logstash/inputs/eventlog.rb
+++ b/lib/logstash/inputs/eventlog.rb
@@ -91,6 +91,7 @@ class LogStash::Inputs::EventLog < LogStash::Inputs::Base
           data = unwrap_racob_variant_array(event.Data)
           # Data is an array of signed shorts, so convert to bytes and pack a string
           e["Data"] = data.map{|byte| (byte > 0) ? byte : 256 + byte}.pack("c*")
+          e.message = event.Message
           queue << e
           # Update the newest-record pointer if I'm shipping the newest record in this batch
           next_newest_shipped_event = event.RecordNumber if (event_index += 1) == 1