Create multiple indices grouped by a field

[munotshubham (Shubham Munot)]

Hi,

I have a .csv file with 2 million records and I am using logstash to index the .csv file.
I do not want to index all records in one index. So I want them to index them based on say states. So basically I'll have 50 indices.

try-"state name"
eg:
try-NY
try-NC
try-MD etc.

Can I do this?

[magnusbaeck (Magnus Bäck)]

Yes, just reference the name of the field containing the state name or abbreviation in the elasticsearch output's index option, e.g.

index => "try-%{state}"

[munotshubham (Shubham Munot)]

Thanks