Use new log_format_has() function instead of strstr().