# Filebeat, Ingest and ES index name pattern

**URL:** https://discuss.elastic.co/t/filebeat-ingest-and-es-index-name-pattern/132060
**Category:** Beats
**Tags:** filebeat
**Created:** [May 16, 2018, 8:29am UTC](https://discuss.elastic.co/t/filebeat-ingest-and-es-index-name-pattern/132060 "2018-05-16T08:29:15Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![atze](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@atze](https://discuss.elastic.co/u/atze)
#### Post date: [May 16, 2018, 8:29am UTC](https://discuss.elastic.co/t/filebeat-ingest-and-es-index-name-pattern/132060/1 "2018-05-16T08:29:16Z")

</div>

Hi,

I've have filebeat setup to ship logs to elasticsearch and the logs are then parsed by a ingest pipeline. Now in filebeat i have a index pattern defined like this:

```auto
output.elasticsearch:
  hosts:
    - localhost:9200
  index: filebeat-%{[beat.version]}-%{+yyyy.MM.dd}

```

If you then send logs which were generated yesterday they will be written to the today index. is there any way to fix this problem without adding logstash in between?

---

<div class="post-metadata">

### Author: ![atze](https://avatars.discourse-cdn.com/v4/letter/a/3be4f8/32.png) [@atze](https://discuss.elastic.co/u/atze)
#### Post date: [May 16, 2018, 9:03am UTC](https://discuss.elastic.co/t/filebeat-ingest-and-es-index-name-pattern/132060/2 "2018-05-16T09:03:44Z")

</div>

i'm just noticeing [https://www.elastic.co/guide/en/elasticsearch/reference/master/date-index-name-processor.html](https://www.elastic.co/guide/en/elasticsearch/reference/master/date-index-name-processor.html)

Will try that!

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 13, 2018, 9:03am UTC](https://discuss.elastic.co/t/filebeat-ingest-and-es-index-name-pattern/132060/3 "2018-06-13T09:03:44Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
