logstash filter split json array