Weird. I can't explain what you are seeing here.
BTW how do you know that the messages you saw are related to logstash or kibana indices?
Any chance you have old kibana instance which is trying to connect to your Elasticsearch cluster? Same for logstash?