Rationalize source and sourcetype

[halr9000]

SmartThings events have a field named source (https://docs.smartthings.com/en/latest/ref-docs/event-ref.html#getsource). Currently, it is passed in to Splunk with the same name. However, looking at the data, I don’t really think it makes sense to do so. Instead, I would like to rename it spot something like “stSource”, and let source be the default based on how the data arrives at Splunk (probably HEC).

For sourcetype, there was not one specified prior to my fork. I made it “http:smartthings” at first, but now I realize I am trying to stuff source and sourcetype into one field. So I will make it simply “smartthings “.