use LogStash::Json and cosmetic cleanups

this should close elasticsearch/logstash#2055