Corrections

A set of corrections for your consideration. The biggest change is using syn-match for stanzas. This helps with complex stanzas (like source::tcp:4096 in props.conf). Also, use syn-match for complex keys (like REPORT-asdf in props.conf). I pulled the latest etc/README from Splunk 6.1.3 and added a few keys, stanzas, and constants.