- fix multiline specs
- added 'source' setting to multiline filter now that there's no
required "@message" field (due to event v1 schema)