Add a new elasticsearch honeypot

adjust installer
adjust elasticpot configs to T-Pot's environment
create Dockerfile
adjust logstash config
update Readme

docker/elk/logstash/dist/logstash.conf

@@ -64,9 +64,9 @@ input {
     type => "Dionaea"
   }
 
-# Elasticpot
+# ElasticPot
   file {
-    path => ["/data/elasticpot/log/elasticpot.log"]
+    path => ["/data/elasticpot/log/elasticpot.json"]
     codec => json
     type => "ElasticPot"
   }
@@ -296,6 +296,17 @@ filter {
     date {
       match => [ "timestamp", "ISO8601" ]
     }
+    mutate {
+      rename => {
+        "content_type" => "http.http_content_type"
+        "dst_port" => "dest_port"
+        "dst_ip" => "dest_ip"
+        "message" => "event_type"
+        "request" => "request_method"
+        "user_agent" => "http_user_agent"
+	"url" => "http.url"
+      }
+    }
   }
 
 # Glutton