Some fields in audit are coming in conflicted. we need to update the logstash filter to change them to expected format ## Acceptance Criteria - [ ] Fields coming in for audit are airtight set