Revert from  add_field => [ "@ingestor.type", "lumberjack" ] to  add_field => [ "_logstash_input", "lumberjack" ]