Fix logscan pipeline on eval

* Rename logscan pipeline to logscan.alert
* Add module to indices array in filebeat.yml

salt/filebeat/etc/filebeat.yml

@@ -307,6 +307,9 @@ output.elasticsearch:
     - index: "so-strelka"
       when.contains:
         module: "strelka"
+    - index: "so-logscan"
+      when.contains:
+        module: "logscan"
   
 setup.template.enabled: false
   {%- else %}