logstash处置字符串