Convert drain ids to app names in syslog-pipeline