not logstash format,add timestamp option