netantho-mozdef: change data format