support v0 and v1 for logstash format