Cloudwatch stream names no longer work for application logs, since we are deleting the field in the remap above.
Solution is to add it to the internal context, then fix the stream name to use "._internal.file".