add a field: logstash_server
removing watcher log xml parsing