support `[logstash-]YYYY`, `[logstash-]YYYY.MM` and `_all` for regexp