updated patterns for logstash