# An index for each host

**URL:** <https://discuss.elastic.co/t/an-index-for-each-host/287333>\
**Category:** Kibana\
**Created:** [October 21, 2021, 3:21pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333 "2021-10-21T15:21:20Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![enp2s6](https://avatars.discourse-cdn.com/v4/letter/e/dec6dc/32.png) [@enp2s6](https://discuss.elastic.co/u/enp2s6)\
**Post date:** [October 21, 2021, 3:21pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/1 "2021-10-21T15:21:20Z")

</div>

Hello,

I would like to have a separate index created for each host.

During a test to include a second host with Filebeat, the data was included in the already existing index.

I could not find anything suitable in the docs.

Does anyone know in which doc I can get more information on how to implement the whole thing?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 25, 2021, 3:56am UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/2 "2021-10-25T03:56:22Z")

</div>

Welcome to our community! 😃

Can you elaborate more on why you'd like to do this?

---

<div class="post-metadata">

**Author:** ![enp2s6](https://avatars.discourse-cdn.com/v4/letter/e/dec6dc/32.png) [@enp2s6](https://discuss.elastic.co/u/enp2s6)\
**Post date:** [October 31, 2021, 11:54am UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/3 "2021-10-31T11:54:56Z")

</div>

Hi Warkolm,

Thanks for your welcome and sorry for the delay.

I'm testing elastic right now and I'm already excited.  
Now I would like to add another computer.

Furthermore would like to evaluate other logs. Server applications and so on.

I expect more overlooks from it. Because I do not want to have everything in one view.

Or I don't want to have problems with the index.

Or is it better if I have everything in an index and then just show the respective logs in the preparation, depending on what I want to have in the view?

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 31, 2021, 2:44pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/4 "2021-10-31T14:44:31Z")

</div>

Hi @enp2s6 Welcome to the community.

Typically especially when you get started my recommendation would be to start with most the default settings filebeat.

The default settings will put all your host logs into a single index.

I would start with that, the when searching or visualizing logs you will just filter on the `host.name` field which will be automatically added to each log line indexed.

This is a very common and the default behavior, I would start with that, many users use this with 100s of hosts.. Then if you need to separate the logs you could do that and even when users do that they tend to separate by log type not host.

---

<div class="post-metadata">

**Author:** ![enp2s6](https://avatars.discourse-cdn.com/v4/letter/e/dec6dc/32.png) [@enp2s6](https://discuss.elastic.co/u/enp2s6)\
**Post date:** [November 3, 2021, 1:59pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/5 "2021-11-03T13:59:06Z")

</div>

Thank you for your answer.

That helps me already. I will try it so.

Thanks again.

Many greetings

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 1, 2021, 1:59pm UTC](https://discuss.elastic.co/t/an-index-for-each-host/287333/6 "2021-12-01T13:59:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.