# ELK with Docker - Setting up new Index Pattern

**URL:** <https://discuss.elastic.co/t/elk-with-docker-setting-up-new-index-pattern/201883>\
**Category:** Logstash\
**Tags:** docker\
**Created:** [October 2, 2019, 1:26am UTC](https://discuss.elastic.co/t/elk-with-docker-setting-up-new-index-pattern/201883 "2019-10-02T01:26:36Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![sud0](https://avatars.discourse-cdn.com/v4/letter/s/e5b9ba/32.png) [@sud0](https://discuss.elastic.co/u/sud0)\
**Post date:** [October 2, 2019, 1:26am UTC](https://discuss.elastic.co/t/elk-with-docker-setting-up-new-index-pattern/201883/1 "2019-10-02T01:26:37Z")

</div>

Hi guys.

I'm trying to setup an ELK using Filebeat and [Docker](https://github.com/spujadas/elk-docker).

I've created a new conf file under `/etc/logstash/conf.d` with the filters that I had from previous tests with ELK years ago.

```
# UAT Web industry filter

if [type] == "uat_web_industry_log" {
    mutate {
        replace => { 'host' => 'uatapp.datacentre.example.com' }
        add_field => { 'environment' => 'uat'
                       'service' => 'web_industry'
        }
    }
    grok {
        match => {
            "message" => "(?m)%{LOGLEVEL:log-level}%{SPACE}%{SPACE}%{TIMESTAMP_ISO8601:timestamp }%{SPACE}%{DATA:class}%{SPACE}-%{SPACE}%{GREEDYDATA:message}"
        }
        overwrite => ['message']
    }    
}

```

When creating an Index pattern on Kibana, I can only create with `filebeat*`, if I try something else it will give me an `Your index pattern doesn't match any indices` error.

How can I make that `conf` file recognized by ELK?

filebeat.yml:

```
  # Glob pattern for configuration loading
  path: ${path.config}/modules.d/*.yml

  # Set to true to enable config reloading
  reload.enabled: false

output:
  logstash:
    enabled: true
    hosts:
      - elk:5044
    timeout: 15
    ssl:
      certificate_authorities:
          - /etc/pki/tls/certs/logstash-beats.crt

filebeat:
  inputs:
    -
      paths:
        - /var/log/httpd/robot_access_log
      document_type: robot-apache-access
    -
      paths:
        - /var/log/httpd/error_log_robot
      document_type: robot-apache-error
```

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [October 30, 2019, 1:26am UTC](https://discuss.elastic.co/t/elk-with-docker-setting-up-new-index-pattern/201883/2 "2019-10-30T01:26:45Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.