如何格式化Azure WAD日志消息使用Sink推送？

Question

我们有一堆Azure Service Fabric Services。我们目前正在使用WAD将所有ETW日志推送到事件中心。从Azure EH读取的事件如下所示 -

{                “记录”： [{                               “时间”：“2016-12-01T03：54：36.3117117Z”，                               “category”：“ - ”，                               “级别”：“信息”，                               “properties”：{                                              “DeploymentId”：“2c07d034-de51-4c7b-a733-7147124512ef”，                                              “角色”：“IaaS”，                                              “RoleInstance”：“ - ”，                                              “等级”：0，                                              “ProviderGuid”：“a26b2183-a5f0-5eeb-a02d-ea55c138fcb9”，                                              “ProviderName”：“ - ”，                                              “EventId”：1，                                              “Pid”：5836，                                              “Tid”：2936，                                              “OpcodeName”：“”，                                              “KeywordName”：“Session3; Session2; Session1; Session0”，                                              “TaskName”：“ - ”，                                              “频道名称”：“”，                                              “EventMessage”：“详细”，                                              “ActivityId”：“00000000-0000-0000-0000-000000000000”，                                              “RelatedActivityId”：“00000000-0000-0000-0000-000000000000”，                               }                                              “消息”：“traceId = \”c365ffeb-0c10-4b8b-bc12-12a79aab19bd \“correlationId = \”\“userId = \”System \“auditTypeId = \”1 \“auditEvent = \ “ - \”auditSource = \“ - ”cloudDeploymentId = \“\”auditLevel = \“Verbose \”auditMessage = \“ - ” tags = \“\”dataCenter = \“** \”“                }] }

他们是否可以在Azure WAD中格式化邮件？基本上，我想将Message格式化为一个分隔符，而不仅仅是键值对中间的空格。