Logstash rotate rule was a bit wonky