fixed support for latest logstash (@fields are in main array now)