Using syslog program field to specify elasticsearch output index (instead of custom tags)