Location of default access log format

I want to override the default access log format (always working with json) and add a few headers in the logging; however I cannot seem to be able to pinpoint the definition of the access log format so that I don’t override it (I just want to add something to it.)

Any ideas?