# Filebeat - Unable to change indice name & disable ILM

**URL:** <https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107>\
**Category:** Beats\
**Tags:** ilm-index-lifecycle-management, filebeat\
**Created:** [June 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107 "2021-06-16T08:39:46Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![shlomia](https://avatars.discourse-cdn.com/v4/letter/s/c2a13f/32.png) [@shlomia](https://discuss.elastic.co/u/shlomia)\
**Post date:** [June 16, 2021, 8:39am UTC](https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107/1 "2021-06-16T08:39:46Z")

</div>

Hi, I recently started to use ELK with Filebeat version 7.13.0.  
I'm trying to change the default indice name that Filebeat is creating:

> "filebeat-%{[agent.version]}-%{+yyyy.MM.dd}"

and also disabling the ILM policy for the created indice.  
No matter what I change in filebeat.yml, I can't manage to get it working.  
This is my current filebeat.yml config:

> **filebeat.yml**
>
> > # ============================== Filebeat inputs ===============================
> > 
> > filebeat.inputs:
> > 
> > - type: log  
> > enabled: true  
> > paths:
> > - /var/log/nginx/access.log\*  
> > exclude\_files: ['.gz$']
> > 
> > # ============================== Filebeat modules ==============================
> > 
> > filebeat.config.modules:  
> > path: ${path.config}/modules.d/\*.yml  
> > reload.enabled: false
> > 
> > # ======================= Elasticsearch template setting =======================
> > 
> > setup.template.settings:  
> > index.number\_of\_shards: 1
> > 
> > # =================================== Kibana ===================================
> > 
> > setup.kibana:  
> > host: "myhost:5601"
> > 
> > # ================================== Outputs ===================================
> > 
> > # ---------------------------- Elasticsearch Output ----------------------------
> > 
> > output.elasticsearch:  
> > hosts: ["myhost:9200"]  
> > pipeline: filebeat-7.13.0-nginx-access-pipeline
> > 
> > # ================================= Processors =================================
> > 
> > processors:
> > 
> > - add\_host\_metadata:  
> > when.not.contains.tags: forwarded
> > - add\_cloud\_metadata: ~
> > - add\_docker\_metadata: ~
> > - add\_kubernetes\_metadata: ~

I tried to put the following lines in my config but nothing helps, It's like being ignored or something.  
output.elasticsearch.index: "customname-%{[agent.version]}-%{+yyyy.MM.dd}"  
setup.template.name: "customname"  
setup.template.pattern: "customname-\*"  
index: "customname-%{+yyyy.MM.dd}"  
output.elasticsearch.index: "customname-%{+yyyy.MM.dd}"  
setup.ilm.enabled: false

Thanks!

---

<div class="post-metadata">

**Author:** ![venkatesh\_prasanth](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/venkatesh_prasanth/32/89319_2.png) [@venkatesh\_prasanth](https://discuss.elastic.co/u/venkatesh_prasanth)\
**Post date:** [June 16, 2021, 10:37am UTC](https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107/2 "2021-06-16T10:37:57Z")

</div>

i would suggest you to create the custom index using command

curl -H "Content-Type: application/json" -XPUT -u elasticusername/password elasticURL:9200/CUSTOMINDEX

by this comment you can create the index

now in kibana go to index template and add filebeat template with your index -Mapping

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [June 17, 2021, 2:09am UTC](https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107/3 "2021-06-17T02:09:09Z")

</div>

Welcome to our community! 😃

Can you elaborate more on what you mean by not working? What is happening?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 15, 2021, 4:09am UTC](https://discuss.elastic.co/t/filebeat-unable-to-change-indice-name-disable-ilm/276107/4 "2021-07-15T04:09:51Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.