# Conditional index + pipeline in output?
**URL:** https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163
**Category:** Beats
**Tags:** filebeat
**Created:** [July 2, 2018, 9:42am UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163 "2018-07-02T09:42:03Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 2, 2018, 9:42am UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163/1 "2018-07-02T09:42:03Z")
I noticed [here](https://discuss.elastic.co/t/conditional-filebeat-output-based-on-document-type/117233) that you can do conditional selection of indices in the output. I was trying to carry that over to also use a specific pipeline when sending to that index as well.
Here's what I have;
```auto
output.elasticsearch:
hosts: ["http://192.168.1.199:9206"]
index: "filebeat-%{[beat.version]}-%{+yyyy.MM}"
indices:
- index: "filebeat-pihole-%{[beat.version]}-%{+yyyy.MM}"
pipeline: pihole-logging
when.contains:
message: "dnsmasq"
```
I am getting this `Exiting: error loading config file: yaml: line 156: mapping values are not allowed in this context` and was wondering if what I am trying to do will even work 🙂
---
### Author:  [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [July 2, 2018, 2:10pm UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163/2 "2018-07-02T14:10:43Z")
It seems your indentation is wrong, though I don't get the exact same error as you do.
Try with this:
```auto
output.elasticsearch:
hosts: ["http://192.168.1.199:9206"]
index: "filebeat-%{[beat.version]}-%{+yyyy.MM}"
indices:
- index: "filebeat-pihole-%{[beat.version]}-%{+yyyy.MM}"
pipeline: pihole-logging
when.contains:
message: "dnsmasq"
```
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 2, 2018, 9:23pm UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163/3 "2018-07-02T21:23:03Z")
> [@adrisr](#):
>
> It seems your indentation is wrong
Ugh, I wondered if it was that but couldn't figure out the correct hierarchy ☹
Now that it doesn't seem impossible, I'll try and report back!
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 3, 2018, 9:12am UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163/4 "2018-07-03T09:12:52Z")
Just a heads up that this works an absolute treat, thanks for the help! 😃
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 31, 2018, 9:12am UTC](https://discuss.elastic.co/t/conditional-index-pipeline-in-output/138163/5 "2018-07-31T09:12:56Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.