Give the cluster a little time to catch up after going through each log file
Create index before running logstash