Make basic assumptions about the input -

The input should provide pre-formatted JSON data, if it's a simple
line input, it will need to generate timestamps and fields; and if
it's journald, or other intellegent input, it will have most of the
things it needs.
Refactor line input based on out new assumption