using cleanup, adding 'timestamp' field handling in the style of 'message'

we use this appender to send exisiting log files to graylog, so we need to extract the timestamp from the log and use it instead of datetime.now.