added query option and changed from macth all to qurey_string=* as default I will have to review which is more effecient when wildcard * is used
added query option and changed from macth all to qurey_string=* as default I will have to review which is more effecient when wildcard * is used

hvandenb/splunk-elasticsearch,mikebd/splunk-elasticsearch