# How to use filename as index wiht beats input
**URL:** https://discuss.elastic.co/t/how-to-use-filename-as-index-wiht-beats-input/128467
**Category:** Logstash
**Created:** [April 18, 2018, 6:57am UTC](https://discuss.elastic.co/t/how-to-use-filename-as-index-wiht-beats-input/128467 "2018-04-18T06:57:40Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@terminaattori](https://discuss.elastic.co/u/terminaattori)
#### Post date: [April 18, 2018, 6:57am UTC](https://discuss.elastic.co/t/how-to-use-filename-as-index-wiht-beats-input/128467/1 "2018-04-18T06:57:40Z")
Hey!
How can I use the filename as an index when using beats input for multiple files?
My filebeat.yml looks currently like this:
```
filebeat.prospectors:
- type: log
paths:
- /path/${CURRENT_SERVER}/*log*
fields:
index: ${CURRENT_SERVER}-${DATE_USED}
close_eof: true
output.logstash:
hosts: ["localhost:5044"]
output.console:
enabled: false
```
and pipeline.conf like this:
```
input {
beats {
port => "5044"
}
}
filter {
grok {
match => { "message" => "%{LOGGERLEVEL:log}%{LOGTYPE:k}%{TIMESTAMP_ISO8601:datetime}%{GREEDYDATA:data}"}
}
date {
match => ["datetime", "ISO8601"]
timezone => TIMEZONE
}
}
output {
elasticsearch {
index => "%{[fields][index]}"
hosts => ["localhost:9200"]
}
}
```
recently this approach worked just fine when I had one file in a folder, but now I have two or three files in a folder. How can I extract the filename and use it as index?
---
### Author:  [@guyboertje](https://discuss.elastic.co/u/guyboertje)
#### Post date: [April 18, 2018, 8:29am UTC](https://discuss.elastic.co/t/how-to-use-filename-as-index-wiht-beats-input/128467/2 "2018-04-18T08:29:48Z")
The event should have a [source field](https://www.elastic.co/guide/en/beats/filebeat/current/exported-fields-log.html#_literal_source_literal).
You can use this field `index => "%{[source]}"`
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 16, 2018, 8:30am UTC](https://discuss.elastic.co/t/how-to-use-filename-as-index-wiht-beats-input/128467/3 "2018-05-16T08:30:02Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.