Clustered ELK

Separated services into different salt states so they can run individually.
Also, elasticsearch now clustered and simple config for logstash to listen for syslog events on 5544. (example to push to logstash in README)