Support the newest logstash event schema

See [LOGSTASH-675](https://logstash.jira.com/browse/LOGSTASH-675)