use `||=` here in case the operator has given a 'json' codec and passed an event that alreayd has a "host" field.