update logstash event formatting