restrict field discovery to graylog2 indices

fixes #250