[elasticsearch] Date based retention policy

[jasonish]

For Logstash style indexes, EveBox should be able to delete indexes older than a certain date, much like the old curator tool.

This does not apply to datastreams which should be configured in Elasticsearch itself.