change. make sure [log4j][target_port] is an integer, else remove as value would be "-"
change. better network.direction logic. Also. convert conn.local_orig & conn.local_resp to strings (does not affect ES mappings), just makes for easier LS pipeline checking