# Logstash indexes number

**URL:** https://discuss.elastic.co/t/logstash-indexes-number/107335
**Category:** Logstash
**Created:** [November 13, 2017, 7:17am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335 "2017-11-13T07:17:43Z")
**Posts on this page:** 5
**Page:** 1

<div class="post-metadata">

### Author: ![cdra](https://avatars.discourse-cdn.com/v4/letter/c/ea666f/32.png) [@cdra](https://discuss.elastic.co/u/cdra)
#### Post date: [November 13, 2017, 7:17am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335/1 "2017-11-13T07:17:43Z")

</div>

Default installation create a logstash index and a winlogbeat index everyday. Where could i find this configuration ??  
What should I do if I wanted to create a index by week (for example...)

---

<div class="post-metadata">

### Author: ![Mojster](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/mojster/32/21209_2.png) [@Mojster](https://discuss.elastic.co/u/Mojster)
#### Post date: [November 13, 2017, 7:21am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335/2 "2017-11-13T07:21:07Z")

</div>

Pipeline configuration of your logstash elastic search output.

[https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index)

For weekly indexes `logstash-%{+xxxx.ww}`

---

<div class="post-metadata">

### Author: ![cdra](https://avatars.discourse-cdn.com/v4/letter/c/ea666f/32.png) [@cdra](https://discuss.elastic.co/u/cdra)
#### Post date: [November 13, 2017, 7:47am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335/3 "2017-11-13T07:47:39Z")

</div>

Actually our output is like :  
output {  
elasticsearch { hosts =\> ["localhost:9200"] }  
stdout { codec =\> rubydebug }  
}

Should we add something like this:  
index =\> "logstash-%{+[YYYY.MM](http://YYYY.MM)}"

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [November 13, 2017, 8:16am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335/4 "2017-11-13T08:16:43Z")

</div>

> Should we add something like this:  
> index =\> "logstash-%{+YYYY.MM}"

Yes, add it inside the elasticsearch block.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 11, 2017, 8:28am UTC](https://discuss.elastic.co/t/logstash-indexes-number/107335/5 "2017-12-11T08:28:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
