ES failover does not switch between options

[jackrobison]

If two sets of ES services are defined herald will not try one after the other when the primary goes down, it will get stuck retrying the one it hadn't been connected to.