Expire logs in elasticsearch