change field names to be in line with Logstash 1.2.x expectations