# Dynamic Index Names via Filebeat

**URL:** https://discuss.elastic.co/t/dynamic-index-names-via-filebeat/371559
**Category:** Beats
**Tags:** filebeat
**Created:** [December 5, 2024, 5:55pm UTC](https://discuss.elastic.co/t/dynamic-index-names-via-filebeat/371559 "2024-12-05T17:55:42Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![dfir](https://avatars.discourse-cdn.com/v4/letter/d/76d3ee/32.png) [@dfir](https://discuss.elastic.co/u/dfir)
#### Post date: [December 5, 2024, 7:57pm UTC](https://discuss.elastic.co/t/dynamic-index-names-via-filebeat/371559/2 "2024-12-05T19:57:18Z")

</div>

Closing this out.

I used this as a base guide for some adjustments to the Config:

> [@Creating dynamic index name with Filebeat based on custom event field fails](https://discuss.elastic.co/t/creating-dynamic-index-name-with-filebeat-based-on-custom-event-field-fails/348835/2):
>
> I got this working after getting a better understanding of the concept of fields in filebeat and elasticsearch. In my case, the custom field I was referring to is created in the elasticsearch ingest pipeline. Those fields are not yet created/available to filebeat. What I did was use a primitive dissect processor within filebeat.yml to process the log message and extract the field I was interested in. That field is now available to be referenced in the filebeat.yml file. I then used that fie…

---

_[View the full topic](https://discuss.elastic.co/t/dynamic-index-names-via-filebeat/371559)._