Set matching child decoder in lf->decoder_info, if a child decoder matches.

If a child decoder regex matches, set the decoder in lf->decoder_info, matching child decoder. As of now the decoder inlf->decoder_info remains set to parent decoder. 

This can potentially fix https://github.com/ossec/ossec-hids/issues/164