Graylog 3.1 - Correlation Engine