# Apache module custom index is ignored

**URL:** <https://discuss.elastic.co/t/apache-module-custom-index-is-ignored/255560>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 16, 2020, 2:57pm UTC](https://discuss.elastic.co/t/apache-module-custom-index-is-ignored/255560 "2020-11-16T14:57:13Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![JohanT](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/johant/32/79076_2.png) [@JohanT](https://discuss.elastic.co/u/JohanT)\
**Post date:** [November 16, 2020, 2:57pm UTC](https://discuss.elastic.co/t/apache-module-custom-index-is-ignored/255560/1 "2020-11-16T14:57:14Z")

</div>

Hi there,

We've upgraded from filebeats 6.8.2 to 7.9.2, and all our logs are getting to ElasticSearch, yet the Apache logs are getting through with the default index (filebeat-version-date type setup) instead of the custom index that worked in 6.8.2. On 6.8.2, we added the below:

```auto
    indices:
    - index: team-system_role_apache_%{+yyyy_ww}
      when.equals:
        fileset.module: apache2
    - index: "%{[fields.log_type]}-%{+yyyy_ww}"

```

This worked in filebeats 6, and everything coming from the apache module on this server's index would be changed to have team-system\_role\_apache\_2020\_11 for example.

Now for filebeat 7.9.2, we changed to the below config:

```auto
    indices:
    - index: team-system_role_apache_%{+yyyy_ww}
      when.equals:
        event.module: apache
    - index: "%{[fields.log_type]}-%{+yyyy_ww}"

```

But the logs are still getting to the server with the default filebeat-version-date type index.

Is something incorrect in this config? The module is enabled and the logs are getting to the Target, just they are not getting this index applied at all. This is all done in filebeat.yml, more config settings pertaining to this, below:

```auto
filebeat:
  modules:
  - module: apache
    access:
      var.paths:
      - "/var/log/apache2/*access*.log"
    error:
      var.paths:
      - "/var/log/apache2/*error*.log"

```

I have included the second index, that simply appends the year and week number to all non-apache indexes and this is still added, it's just the apache one that's not working...

Am I missing something?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 14, 2020, 4:57pm UTC](https://discuss.elastic.co/t/apache-module-custom-index-is-ignored/255560/2 "2020-12-14T16:57:19Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.