estezz

I think #2 sounds best. It will make monitoring the consumer easier. If you want help let me know. Secor https://github.com/pinterest/secor has a nice configuration with wildcarding

Both options would be awesome.