code refactor

regex rule should be like:
{
"regexp":"/xxxx/xxx",
"state":"disable",
}
if state is disable, matched log will not insert into elasticsearch.