# Filebeat indexing on Windows **URL:** \ **Category:** Beats\ **Tags:** filebeat\ **Created:** [June 19, 2017, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962 "2017-06-19T15:39:15Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![matt.wilcock](https://avatars.discourse-cdn.com/v4/letter/m/df705f/32.png) [@matt.wilcock](https://discuss.elastic.co/u/matt.wilcock)\ **Post date:** [June 19, 2017, 3:39pm UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962/1 "2017-06-19T15:39:15Z")
Hi, I'm new to the Elastic Stack and came across filebeat when trying to find a way to push custom logfiles from windows through to Elasticsearch. I've got filebeat installed and have got the logs going to AWS Elasticsearch but I'm not sure how to index my custom log file so that it is more searchable in Kibana? My log file is space delimited like this: "date" "starttime" "endtime" "client" "successful", etc When my log file arrives in Elasticsearch, the entire line appears in the "message" field. How can I index the log file so each column in the log file shows as a separate field when it gets through to Elasticsearch? Probably a basic question but I'm just starting my journey. Thanks! ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [June 20, 2017, 9:22am UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962/2 "2017-06-20T09:22:44Z")
filebeat is just the data shipper. It does not parse any content. For parsing you can use either Logstash or Elasticsearch Ingest Node. The [filebeat modules](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules.html) for example do configure and use [Elasticseach Ingest Node](https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html) automatically on startup. ---
**Author:** ![matt.wilcock](https://avatars.discourse-cdn.com/v4/letter/m/df705f/32.png) [@matt.wilcock](https://discuss.elastic.co/u/matt.wilcock)\ **Post date:** [June 20, 2017, 11:51am UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962/3 "2017-06-20T11:51:21Z")
Thanks for the information. I've just checked on the filebeat modules and can see that there are some standard modules but I would need to create my own to parse my custom log file? Can you created your own on Windows? The developer guide just has instructions for Linux: [https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-devguide.html](https://www.elastic.co/guide/en/beats/filebeat/current/filebeat-modules-devguide.html) Would you recommend that I should use logstash for my use case? ---
**Author:** ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)\ **Post date:** [June 20, 2017, 1:55pm UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962/4 "2017-06-20T13:55:17Z")
filebeat modules is just a set of configurations for filebeat and Elasticsearch. You don't need to use filebeat modules, you can as well create a pipeline in Elasticsearch and configure filebeat to send the logs to this pipeline. You can simulate/create pipelines in Elasticsearch using any REST client or the Elasticsearch developer console (e.g. from within Kibana). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 18, 2017, 1:55pm UTC](https://discuss.elastic.co/t/filebeat-indexing-on-windows/89962/5 "2017-07-18T13:55:24Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.