basic PDML filter for logstash