Logstash fixes

- add ship_tags control
- add split and rename mutate filter