Parser rules improvements

Currently the parser sends a log line through a set of (regex) rules to identify it to know how to safely process it. The proposal is to replace the list with a circular buffer in hopes that for well formed log files, the "next" log line will be the "next" rule which should hopefully reduce the number of rules to try before getting a hit. The worst case is still run to failure, failure being, the log line being passed in isn't recognized.

Start by locating the parser's regex rule list and the code that tries rules against each log line. Review how rule ordering is maintained and how unrecognized lines are handled. Done means the parser uses a circular buffer to prefer the next rule for well-formed logs while preserving the existing failure behavior.