# How to append source system data into INDEX name Dynamically during push data from Logstash to ElasticSearch

**URL:** <https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544>\
**Category:** Logstash\
**Created:** [May 30, 2024, 9:21am UTC](https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544 "2024-05-30T09:21:46Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Manoilayans](https://avatars.discourse-cdn.com/v4/letter/m/50afbb/32.png) [@Manoilayans](https://discuss.elastic.co/u/Manoilayans)\
**Post date:** [May 30, 2024, 9:21am UTC](https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544/1 "2024-05-30T09:21:46Z")

</div>

> output {  
> elasticsearch {  
> hosts =\>"[http://localhost:9200](http://localhost:9200)"  
> index =\> "control\_tower\_poc\_-%{+YYYY.MM.dd}"  
> user =\> "elastic"  
> password =\> "\*\*\*\*\*\*"
> 
> ```
> }
> stdout {
> codec => rubydebug
> }
> 
> ```
> 
> }

How to add some field or data from the source system, to create the index name based on the customer dynamically

**For Example:**  
"control\_tower\_poc\_ **{customer\_name}** -%{+YYYY.MM.dd}"

---

<div class="post-metadata">

**Author:** ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)\
**Post date:** [May 30, 2024, 10:24am UTC](https://discuss.elastic.co/t/how-to-append-source-system-data-into-index-name-dynamically-during-push-data-from-logstash-to-elasticsearch/360544/2 "2024-05-30T10:24:02Z")

</div>

> [@Manoilayans](#):
>
> "control\_tower\_poc\_ **{customer\_name}** -%{+YYYY.MM.dd}"

That would be `"control_tower_poc_%{customer_name}-%{+YYYY.MM.dd}"`

Make sure the field exists (use a filter to add a default value if it does not) or this will create an invalid index name.