# How to differentiate Multiple metricbeat system logs in one kibana index
**URL:** https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416
**Category:** Kibana
**Created:** [January 30, 2019, 6:52pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416 "2019-01-30T18:52:00Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)
#### Post date: [January 30, 2019, 6:52pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416/1 "2019-01-30T18:52:00Z")
Hi all, I have 4 different remote machines so I'm getting system information like disk, cpu and memory used using metricbeat and sanding it to logstash, in creating only one index daily bases.
`So my question is how can I figure out in kibana that which cpu, disk and memory is belongs to which machine?`
Thanks in advanced.
Regards,
Vinit
---
### Author:  [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [January 30, 2019, 7:11pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416/2 "2019-01-30T19:11:26Z")
Vinit,
I just set this up. it is really easy once you know what is happenning behind kibana
I am doing yearly index. one index per year for all the systems combine.
first install metricbeat on all the system without turning anything.
I have also install this in one of the kibana server as well
now on kibana server where you going to turn on metricbeat you need following entry in metricbeat.yml. This is what I have
kibana and metricbeat server are same host as this is test
[root@kibana01 conf.d]# less /etc/metricbeat/metricbeat.yml |grep -v '#' |sed '/^$/d'
metricbeat.config.modules:
path: /etc/metricbeat/modules.d/system.yml
reload.enabled: false
setup.template.settings:
index.number\_of\_shards: 3
index.codec: best\_compression
setup.dashboards.enabled: true
setup.dashboards.beat: metricbeat
setup.dashboards.index: metricbeat\_sysstat\_\*
setup.kibana:
host: "kibana01:5601"
output.elasticsearch:
hosts: ["kibana01:9200"]
index: "metricbeat\_sysstat\_%{+yyyy}"
setup.template.name: "metricbeat\_sysstat"
setup.template.pattern: "metricbeat\_sysstat\_\*"
processors:
- add\_host\_metadata: ~
logging.to\_files: true
logging.files:
path: /elkdata01/log/metricbeat
keepfiles: 4
Make sure to go in to /usr/share/metricbeat/kibana/6/dashboard and remove all the dashboard that you don't want. I kept only system related stuff as I didn't want anything to with http or kafka or others.
now start metricbeat on kibana01
now go to your other system and their /etc/metricbeat/metricbeat.yml looks like this
You will see that no kibana option is enable on this host.
[root@houst01 metricbeat]# cat /etc/metricbeat/metricbeat.yml |grep -v '#' |sed '/^$/d'
metricbeat.config.modules:
path: /etc/metricbeat/modules.d/system.yml
reload.enabled: false
setup.template.settings:
index.number\_of\_shards: 3
index.codec: best\_compression
output.elasticsearch:
hosts: ["kibana01:9200"]
index: "metricbeat\_sysstat\_%{+yyyy}"
setup.template.name: "metricbeat\_sysstat"
setup.template.pattern: "metricbeat\_sysstat\_\*"
processors:
- add\_host\_metadata: ~
logging.to\_files: true
logging.files:
keepfiles: 4
Once you do that you will have host01 appers in your dash board in seconds.
---
### Author:  [@Vinit\_Kumar](https://discuss.elastic.co/u/Vinit_Kumar)
#### Post date: [January 30, 2019, 7:19pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416/3 "2019-01-30T19:19:17Z")
@elasticforme Thank you for valuables information. And one more question is
`Can we change the beat.name in metricbeat.`
bcoz I found on google that beat.name can contain different IP of the remote machine.
So I just want to change that IP to any custom name.
---
### Author:  [@elasticforme](https://discuss.elastic.co/u/elasticforme)
#### Post date: [January 30, 2019, 7:29pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416/4 "2019-01-30T19:29:28Z")
that I have no clue.
actually beat.name = hostname sending information.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [February 27, 2019, 7:29pm UTC](https://discuss.elastic.co/t/how-to-differentiate-multiple-metricbeat-system-logs-in-one-kibana-index/166416/5 "2019-02-27T19:29:37Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.