Big elasticsearch update
remove logstash