clarified rule names. Added comments
Ubuntu removed support 12.04.
public => private due to startup error.
logstash filtering added
intergration test added