From Noise to Signal: Improving Security Log Anomaly Detection Using LLMs with Endpoint-Specific Logs