# ELK version 8.6.2 - custom data-stream and index name

**URL:** <https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382>\
**Category:** Kibana\
**Created:** [March 23, 2023, 5:49pm UTC](https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382 "2023-03-23T17:49:00Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![nunex\_17](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Post date:** [March 23, 2023, 5:49pm UTC](https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382/1 "2023-03-23T17:49:00Z")

</div>

Hi.

Since i updated to this new version, i can´t configure a custom name to my index and data-stream.

By default, filebeat creates a Data Stream named "filebeat-8.6.2" and a index ".ds-filebeat-8.6.2-2023.03.23-000001".

What i want to do is to define a custom name instead of "filebeat" e.g "customname-8.6.2" and ".ds-customname-8.6.2-2023.03.23-000001". In addition to that, i need this to be rolled over every day.

Before the update, my config was this:

```auto
setup.ilm.enabled: auto
setup.ilm.rollover_alias: "suricata-ids" #Write your alias
setup.ilm.pattern: "{now/d}-000001"
setup.template.name: "suricata-ids"
setup.template.pattern: "suricata-ids-*"

```

Now this config is not working but i want to configure something similar to this.

Thanks!

---

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [March 27, 2023, 1:16am UTC](https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382/2 "2023-03-27T01:16:56Z")

</div>

Read [this](https://discuss.elastic.co/t/index-lifecycle-management-metricbeat/318757/2) closely ... This is metricbeat should be same for filebeat.

---

<div class="post-metadata">

**Author:** ![nunex\_17](https://avatars.discourse-cdn.com/v4/letter/n/f17d59/32.png) [@nunex\_17](https://discuss.elastic.co/u/nunex_17)\
**Post date:** [March 27, 2023, 2:53pm UTC](https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382/3 "2023-03-27T14:53:13Z")

</div>

Spot on! It worked, thanks.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 24, 2023, 2:54pm UTC](https://discuss.elastic.co/t/elk-version-8-6-2-custom-data-stream-and-index-name/328382/4 "2023-04-24T14:54:04Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.