hekad: add app.log to elasticsearch message_matcher