Logstash codec should be plain, not json
Copy elasticsearch-remove-old-indices.sh to the correct folder