# Filebeat and Fortinet

**URL:** https://discuss.elastic.co/t/filebeat-and-fortinet/303397
**Category:** Beats
**Tags:** filebeat
**Created:** [April 27, 2022, 11:39am UTC](https://discuss.elastic.co/t/filebeat-and-fortinet/303397 "2022-04-27T11:39:35Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Christer\_Palmen](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/christer_palmen/32/76857_2.png) [@Christer\_Palmen](https://discuss.elastic.co/u/Christer_Palmen)
#### Post date: [April 27, 2022, 11:39am UTC](https://discuss.elastic.co/t/filebeat-and-fortinet/303397/1 "2022-04-27T11:39:35Z")

</div>

> Blockquote

Hello.  
Filebeat seems to have built in Index patterns and templates for some Fortinet products, which is good from my point of view.  
What I would like to do is to instead of using the default index that Filebeat creates, change it to something else that tells you more of what kind of logs we are importing, I thinking mostly about logs from Fortinet firewalls:

index: "fortigate-%{+yyyy.MM.dd}"

According to the documentaion, if I want to use my own Index name, I need to also configure the setup.template.name and setup.template.pattern.  
Is there any way for me to use the existing template name and template patterns that is built in to the Filebeat for this task?

> Blockquote

---

<div class="post-metadata">

### Author: ![ibra\_013](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ibra_013/32/104827_2.png) [@ibra\_013](https://discuss.elastic.co/u/ibra_013)
#### Post date: [May 2, 2022, 8:56pm UTC](https://discuss.elastic.co/t/filebeat-and-fortinet/303397/2 "2022-05-02T20:56:49Z")

</div>

Hi,

we have the same setup , we have created the ILM ploicy ,index pattern ,index and alias with name we want and configure filebeat with the setup.template.name and setup.template.pattern.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 30, 2022, 10:57pm UTC](https://discuss.elastic.co/t/filebeat-and-fortinet/303397/3 "2022-05-30T22:57:00Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
