deals partially with #1973

see also https://github.com/vjeantet/grok/issues/17

fixes #1810

this log format is likely soon going to be removed from a future
influxdb release, so we should not be recommending that users base any
of their log parsing infra on this.

closes #1479

closes #102
closes #328