[syslog-ng] Openstack is a chatty $#!^

[Fabien Wernli]

Hi Scot!

We use a single destination but set the ${__es_index} macro using rewrite
rules:

elasticsearch2(index("${__es_index:-syslog}-$YEAR.$MONTH.$DAY"));