# Elasticsearch for logging. HOW to configure automatic creation of the new index every day? **URL:** \ **Category:** Elasticsearch\ **Created:** [August 26, 2014, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467 "2014-08-26T17:01:39Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Post date:** [August 26, 2014, 5:01pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467/1 "2014-08-26T17:01:39Z")
Most of the guides I could find recommend creation of _one index per day_ when Elastic is used to store and query log files. Unfortunately not a single guide dares to explain _HOW exactly shall I configure freshly installed Elastic to create new index every day_. Could somebody please help me with it? A few bits of additional info: I deal with Elastic on Windows Server (or may be on Azure, but not any Linux) and I (plan) to send log events to Elastic using Serilog. Any advise for those special circumstances appreciated. Thank you! Konstantin -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/c7594fb8-7caf-4163-a2d9-b50b3c7b6994%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/c7594fb8-7caf-4163-a2d9-b50b3c7b6994%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![David\_Kleiner](https://avatars.discourse-cdn.com/v4/letter/d/50afbb/32.png) [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\ **Post date:** [August 26, 2014, 8:32pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467/2 "2014-08-26T20:32:51Z")
Hello Konstantin, You can use index value of name-%{+YYYY.MM.dd} in your elasticsearch output in logstash (link: [Elasticsearch output plugin | Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.4.2/outputs/elasticsearch#index)) HTH, David On Tuesday, August 26, 2014 10:01:39 AM UTC-7, Konstantin Erman wrote: > Most of the guides I could find recommend creation of _one index per day_ > when Elastic is used to store and query log files. Unfortunately not a > single guide dares to explain _HOW exactly shall I configure freshly > installed Elastic to create new index every day_. Could somebody please > help me with it? > > A few bits of additional info: I deal with Elastic on Windows Server (or > may be on Azure, but not any Linux) and I (plan) to send log events to > Elastic using Serilog. Any advise for those special circumstances > appreciated. > > Thank you! > Konstantin -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/7c2fbf8d-1c5e-435d-945b-2e6baf012abe%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/7c2fbf8d-1c5e-435d-945b-2e6baf012abe%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![Konstantin\_Erman](https://avatars.discourse-cdn.com/v4/letter/k/9d8465/32.png) [@Konstantin\_Erman](https://discuss.elastic.co/u/Konstantin_Erman)\ **Post date:** [August 26, 2014, 11:26pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467/3 "2014-08-26T23:26:31Z")
Thank you, David! I don't use Logstash mostly because I could not find an easy way to send Serilog events to Logstash, while Elastic sink comes with Serilog in the package. But regardless, from your comment I realized that Indices are created at the moment something is indexed into them and therefore there is no need to tweak any configuration! That "one a day" behavior is achieved simply by giving indices new name for every day. It looks trivial, but for uninitiated take some mental effort to realize. 🙂 Konstantin On Tuesday, August 26, 2014 1:32:52 PM UTC-7, David Kleiner wrote: > Hello Konstantin, > > You can use index value of name-%{+YYYY.MM.dd} in your elasticsearch > output in logstash > > (link: [Elasticsearch output plugin | Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.4.2/outputs/elasticsearch#index)) > > HTH, > > David > > On Tuesday, August 26, 2014 10:01:39 AM UTC-7, Konstantin Erman wrote: > > > Most of the guides I could find recommend creation of _one index per day_ > > when Elastic is used to store and query log files. Unfortunately not a > > single guide dares to explain _HOW exactly shall I configure freshly > > installed Elastic to create new index every day_. Could somebody please > > help me with it? > > > > A few bits of additional info: I deal with Elastic on Windows Server (or > > may be on Azure, but not any Linux) and I (plan) to send log events to > > Elastic using Serilog. Any advise for those special circumstances > > appreciated. > > > > Thank you! > > Konstantin -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/48c66486-1a43-42ac-ae89-cb25408b8945%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/48c66486-1a43-42ac-ae89-cb25408b8945%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![David\_Kleiner](https://avatars.discourse-cdn.com/v4/letter/d/50afbb/32.png) [@David\_Kleiner](https://discuss.elastic.co/u/David_Kleiner)\ **Post date:** [August 27, 2014, 11:54pm UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467/4 "2014-08-27T23:54:05Z")
Quite right, I'm glad I pointed you in the right directions 🙂 Cheers! David On Tuesday, August 26, 2014 4:26:31 PM UTC-7, Konstantin Erman wrote: > Thank you, David! > > I don't use Logstash mostly because I could not find an easy way to send > Serilog events to Logstash, while Elastic sink comes with Serilog in the > package. > > But regardless, from your comment I realized that Indices are created at > the moment something is indexed into them and therefore there is no need to > tweak any configuration! That "one a day" behavior is achieved simply by > giving indices new name for every day. It looks trivial, but for > uninitiated take some mental effort to realize. 🙂 > > Konstantin > On Tuesday, August 26, 2014 1:32:52 PM UTC-7, David Kleiner wrote: > > > Hello Konstantin, > > > > You can use index value of name-%{+YYYY.MM.dd} in your elasticsearch > > output in logstash > > > > (link: [Elasticsearch output plugin | Logstash Reference [8.11] | Elastic](http://logstash.net/docs/1.4.2/outputs/elasticsearch#index)) > > > > HTH, > > > > David > > > > On Tuesday, August 26, 2014 10:01:39 AM UTC-7, Konstantin Erman wrote: > > > > > Most of the guides I could find recommend creation of _one index per > > > day_ when Elastic is used to store and query log files. Unfortunately > > > not a single guide dares to explain _HOW exactly shall I configure > > > freshly installed Elastic to create new index every day_. Could > > > somebody please help me with it? > > > > > > A few bits of additional info: I deal with Elastic on Windows Server (or > > > may be on Azure, but not any Linux) and I (plan) to send log events to > > > Elastic using Serilog. Any advise for those special circumstances > > > appreciated. > > > > > > Thank you! > > > Konstantin -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/78979624-0379-47cd-a5db-b5d4e6a36fb9%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/78979624-0379-47cd-a5db-b5d4e6a36fb9%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 1:05am UTC](https://discuss.elastic.co/t/elasticsearch-for-logging-how-to-configure-automatic-creation-of-the-new-index-every-day/19467/5 "2017-07-06T01:05:55Z")