# How To make my elasticsearch index smaller by field values?

**URL:** <https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471>\
**Category:** Elasticsearch\
**Created:** [October 22, 2021, 9:22pm UTC](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471 "2021-10-22T21:22:49Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![dfang](https://avatars.discourse-cdn.com/v4/letter/d/34f0e0/32.png) [@dfang](https://discuss.elastic.co/u/dfang)\
**Post date:** [October 22, 2021, 9:22pm UTC](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471/1 "2021-10-22T21:22:49Z")

</div>

I have setup ELK running fine. I have filebeat feeding log data via logstash then into Elasticsearch indice. This setup create one logstash index per-day . The challenge now is to find ways to break down the indices into smaller ones by field values (e.g. LOGLEVEL, etc). Is it possible? If so, how?

Later on, I also like to explore using rollup feature to summarize/aggerate records to have fewer data points to retrieve when querying an large time window (but that will be a different project).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 25, 2021, 3:30am UTC](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471/2 "2021-10-25T03:30:34Z")

</div>

Welcome to our community! 😃

> [@dfang](#):
>
> The challenge now is to find ways to break down the indices into smaller ones by field values (e.g. LOGLEVEL, etc). Is it possible? If so, how?

Can you elaborate more on why you'd like to do this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [November 22, 2021, 3:30am UTC](https://discuss.elastic.co/t/how-to-make-my-elasticsearch-index-smaller-by-field-values/287471/3 "2021-11-22T03:30:40Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.