overhaul sof-elk_clear.py to better handle sourcedirs

[philhagen]

for example, bro logs don't all go into the 'logstash' index... conn* goes into netflow, http* into httpdlog, etc. the script needs to accommodate these scenarios, then use 'logstash' as a fallback for any other files.