logstash regex faal (fixed in 1.5)