- fix dns specs
- fix geoip specs
- fix grep specs
- Make grok 'singles' default to true now.
  This change corrects some ancient behavior of grok where (in like
  2004?) it made sense to capture fields as arrays because early grok
  implementations didn't supported 'named' patterns, so you'd have 2-3
  IP patterns in a single match and you'd want to keep all of them, and
  thus an array made sense.

  It's 2013 now and we got our shit together. Roll forward!