As Icinga is changing its log format in https://github.com/Icinga/icinga2/pull/7872 , we have to adapt our rules to that.