# Filebeat multiple input and multiple output indices

**URL:** <https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 28, 2020, 10:03pm UTC](https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624 "2020-10-28T22:03:09Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jigar\_Patel1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jigar_patel1/32/47985_2.png) [@Jigar\_Patel1](https://discuss.elastic.co/u/Jigar_Patel1)\
**Post date:** [October 28, 2020, 10:03pm UTC](https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624/1 "2020-10-28T22:03:09Z")

</div>

I am getting error with filebeat.yml what am I missing?

```auto
 filebeat test config
Exiting: error initializing publisher: missing condition

 cat filebeat.yml
filebeat.inputs:

- type: log
  paths:
    - /var/log/cloud-init.log
  tags: ["cloud-init"]
- type: log
  paths:
    - /var/log/boot.log
  tags: ["boot"]
- type: log
  paths:
    - /var/log/yum.log
  tags: ["yum"]
- type: log
  paths:
    - /var/log/httpd/*_log
  tags: ["apache"]
  fields:
    apache: true
  fields_under_root: true

filebeat.config.modules:
  path: ${path.config}/modules.d/*.yml
  reload.enabled: false

#setup.template.name: "filebeat"
#setup.template.pattern: "filebeat-*"
#setup.template.fields: "fields.yml"
#setup.template.overwrite: true

setup.template.settings:
  index.number_of_shards: 5
  index.number_of_replicas: 1

output.elasticsearch:
  hosts: ["https://vpc-jdev1-asdasdasasd.us-west-2.es.amazonaws.com:443"]
  indices:
  - index: "yum-%{+yyyy.MM.dd}"
    when.containes:
      tags: "yum"
  - index: "boot-%{+yyyy.MM.dd}"
    when.containes:
      tags: "boot"
  - index: "apache-%{+yyyy.MM.dd}"
    when.containes:
      tags: "apache"
  - index: "cloud-init-%{+yyyy.MM.dd}"
    when.containes:
      tags: "cloud-init"

processors:
  - add_host_metadata: ~
  - add_cloud_metadata: ~

logging.level: info
logging.to_files: true
logging.files:
  path: /var/log/filebeat
  name: filebeat
  keepfiles: 3
  permissions: 0644

setup.ilm.enabled: false
setup.pack.security.enabled: false
setup.xpack.graph.enabled: false
setup.xpack.watcher.enabled: false
setup.xpack.monitoring.enabled: false
setup.xpack.reporting.enabled: false

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [October 28, 2020, 10:34pm UTC](https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624/2 "2020-10-28T22:34:15Z")

</div>

> [@Jigar\_Patel1](#):
>
> `when.containes:`

Is it written like this in your config file?

If so, this is a typo, it is `when.contains`.

---

<div class="post-metadata">

**Author:** ![Jigar\_Patel1](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jigar_patel1/32/47985_2.png) [@Jigar\_Patel1](https://discuss.elastic.co/u/Jigar_Patel1)\
**Post date:** [October 28, 2020, 11:31pm UTC](https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624/3 "2020-10-28T23:31:47Z")

</div>

Thanks @leandrojmp for quick reply.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 26, 2020, 1:32am UTC](https://discuss.elastic.co/t/filebeat-multiple-input-and-multiple-output-indices/253624/4 "2020-11-26T01:32:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.