# Differences between Discover and Logs?

**URL:** <https://discuss.elastic.co/t/differences-between-discover-and-logs/161184>\
**Category:** Logs\
**Created:** [December 17, 2018, 3:36pm UTC](https://discuss.elastic.co/t/differences-between-discover-and-logs/161184 "2018-12-17T15:36:38Z")\
**Posts on this page:** 1\
**Showing post:** 3

<div class="post-metadata">

**Author:** ![phr0gz](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/phr0gz/32/9454_2.png) [@phr0gz](https://discuss.elastic.co/u/phr0gz)\
**Post date:** [January 7, 2019, 4:04pm UTC](https://discuss.elastic.co/t/differences-between-discover-and-logs/161184/3 "2019-01-07T16:04:39Z")

</div>

Thanks for the answer, we use multiple index patterns (around 20 patterns using 20 different templates in ES).  
We parse system/event logs from linux/windows/switch/router.  
And also antispam appliances, radius appliances...

In the doc you highlighted me in an [other post](https://discuss.elastic.co/t/multiple-fields-instead-of-message/161301/2) it does not seems to be possible to use multiple "log templates/patterns".

But I may not understand correctly and maybe it is possible to change the "default" value in "xpack.infra.sources. **default**.someparameter" to use multiple templates.  
e.g.

```auto
xpack.infra.sources.linuxevent.logAlias: 'logstash-event-linux-*'
xpack.infra.sources.linuxevent.fields.timestamp: 'mytimestampfield'
xpack.infra.sources.linuxevent.fields.message: 'field1', 'field2', 'field3', 'field4', 'field5'
xpack.infra.sources.windowsevent.logAlias: 'logstash-event-windows-*'
xpack.infra.sources.windowsevent.fields.timestamp: 'myothertimestampfield'
xpack.infra.sources.windowsevent.fields.message: 'field1', 'field2', 'field3'
xpack.infra.sources.switchevent.logAlias: 'logstash-event-switch-*'
xpack.infra.sources.switchevent.fields.timestamp: 'othertimestampfield'
xpack.infra.sources.switchevent.fields.message: 'field1', 'field2'

```

Is it possible or planned to be able to use multiple logalias/timestamp/message depending the index?

---

_[View the full topic](https://discuss.elastic.co/t/differences-between-discover-and-logs/161184)._