so-allow: fix verbiage for ES REST Endpoint

[weslambert]

Currently, the verbiage is somewhat misleading (it's reading from the $device variable):

Please enter the IP address of the Elasticsearch REST Endpoint you'd like to allow to connect to port(s) 9200:

We should probably change it to something like:

Please enter the IP address of the Elasticsearch client you'd like to allow to connect to port(s) 9200:

[dougburks]

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/Bpdvy_j5RSY/discussion

[dougburks]

published:
https://blog.securityonion.net/2018/09/securityonion-setup-20120912.html