# Filebeat send to ES ingest pipeline but can't create index
**URL:** https://discuss.elastic.co/t/filebeat-send-to-es-ingest-pipeline-but-cant-create-index/200586
**Category:** Beats
**Tags:** filebeat
**Created:** [September 22, 2019, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-send-to-es-ingest-pipeline-but-cant-create-index/200586 "2019-09-22T13:31:48Z")
**Posts on this page:** 2
**Page:** 1
### Author:  [@Jib\_Suwanachote](https://discuss.elastic.co/u/Jib_Suwanachote)
#### Post date: [September 22, 2019, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-send-to-es-ingest-pipeline-but-cant-create-index/200586/1 "2019-09-22T13:31:48Z")
I would like to send log to to ingest node pipeline this is my config
before I send the log via filebeat I was created pipeline on ES and see filebeat log send the log to ES.
I have question
- Why I can't see index name "abc" on ES
- Is this true on output.elasticsearch should be set to ingest node only ? I have 3 master,data node and 2 ingest node
Environment:
filebeat version 7.3.2 (amd64), libbeat 7.3.2
Elastisearch version 7.3
```
filebeat.inputs:
- type: log
enabled: true
tail_files: true
paths:
- /tmp/service.log
pipeline: "testpipeline"
setup.template.enabled: false
#================================ Outputs =====================================
output.elasticsearch:
hosts: ["10.235.163.97:9200","10.235.163.98:9200"]
index: abc
filebeat.registry.path: /var/lib/filebeat/registry/test
```
**Elasticsearch pipline**
```
PUT _ingest/pipeline/testpipeline
{
"description": "Pipeline for test",
"processors": [{
"grok": {
"ignore_missing": true,
"field": "message",
"patterns": ["""TIMESTAMP\|%{TIMESTAMP_ISO8601:TIMESTAMP}\|LOG_TYPE\|%{GREEDYDATA:LOG_TYPE}\|NODE\|%{GREEDYDATA:NODE}\|CACHE_STATUS\|%{GREEDYDATA:CACHE_STATUS}\|REQUEST_ID\|%{GREEDYDATA:REQUEST_ID}\|TRAN_ID\|%{GREEDYDATA:TRAN_ID}\|USER_ID\|%{GREEDYDATA:USER_ID}\|ACTION\|%{GREEDYDATA:ACTION}\|COMMAND\|%{GREEDYDATA:COMMAND}\|REQUEST_PARAM\|%{GREEDYDATA:REQUEST_PARAM}\|RESPONSE_PARAM\|%{GREEDYDATA:RESPONSE_PARAM}\|RESULT\|%{GREEDYDATA:RESULT}\|RESULT_CODE\|%{GREEDYDATA:RESULT_CODE}\|RESULT_DESC\|%{GREEDYDATA:RESULT_DESC}\|RESP_TIME\|%{GREEDYDATA:RESP_TIME}"""
]
}
}
]
}
```
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 20, 2019, 1:31pm UTC](https://discuss.elastic.co/t/filebeat-send-to-es-ingest-pipeline-but-cant-create-index/200586/2 "2019-10-20T13:31:51Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.