replace deprecated syslog_timestamp with match
move processing from shipper to indexer where it belongs.
dry and go direct to .deb

The wolfnet PPA has become obsolete.
Fortunately, the logstash project is now building their own .debs.
Pull that directly for install.

Also, DRY out a few strings to variables.