if data[@timestamp] is an array, take the first line to convert to a joda time structure [LOGSTASH-2142]