Rewrite hostnames

[inspired]

The current code allows us to update timestamps to current time via update_timestamp: True. Could we also have a similar parameter to update the host before indexing in Splunk? Certain detections may rely on the host field or only trigger on activities happening on multiple hosts.