refactored to increase flexibility



<!-- Reviewable:start -->
[<img src="https://reviewable.io/review_button.png" height=40 alt="Review on Reviewable"/>](https://reviewable.io/reviews/yandex-sysmon/obedient.elk/17)
<!-- Reviewable:end -->