modify logstash message to match graylog style