[log_format] display log_body for the body field instead of the format name and add :mark-expr command