# Change filebeat default index name while using Suricata module

**URL:** <https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [April 26, 2021, 11:11pm UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302 "2021-04-26T23:11:00Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![nunex\_17](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Post date:** [April 26, 2021, 11:11pm UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302/1 "2021-04-26T23:11:00Z")

</div>

Hi!

How can I change the filebeat default index name while using Suricata module?

Appreciated!

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [April 27, 2021, 1:03am UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302/2 "2021-04-27T01:03:01Z")

</div>

When u setup filebeat u can customize the index alias or index name to whatever u want. Be aware that the dashboards will still be set to the filebeat-\* index pattern.

---

<div class="post-metadata">

**Author:** ![nunex\_17](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Post date:** [April 27, 2021, 8:46am UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302/3 "2021-04-27T08:46:20Z")

</div>

And is it possible to set dashboards to the new index pattern?

---

<div class="post-metadata">

**Author:** ![legoguy1000](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/legoguy1000/32/54301_2.png) [@legoguy1000](https://discuss.elastic.co/u/legoguy1000)\
**Post date:** [April 27, 2021, 11:40am UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302/4 "2021-04-27T11:40:25Z")

</div>

you can manually change the dashboard json files or change the dashboards after they're loaded into kibana. But changing the index name/alias in the filebeat config doesn't affect the dashboards.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 25, 2021, 1:41pm UTC](https://discuss.elastic.co/t/change-filebeat-default-index-name-while-using-suricata-module/271302/5 "2021-05-25T13:41:21Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.