Move the Elasticsearch stack to ns4.

host01 is falling over running everything there. ns4 is secure enough
for the logs (volumes are encrypted, I don't think that there are
passwords or keys in the logs, just private information).