# Logstash not creating multiple index

**URL:** https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234
**Category:** Logstash
**Created:** [September 10, 2020, 8:14pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234 "2020-09-10T20:14:40Z")
**Posts on this page:** 6
**Page:** 1

<div class="post-metadata">

### Author: ![shubham\_gour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_gour/32/75396_2.png) [@shubham\_gour](https://discuss.elastic.co/u/shubham_gour)
#### Post date: [September 10, 2020, 8:14pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/1 "2020-09-10T20:14:40Z")

</div>

i have this code use in conf file of logstash

input {  
beats{  
port =\> 5044  
}  
}  
filter {  
grok{  
match =\> { "message" =\> "%{INT:Event\_Date} %{MONTH:Event\_Month} %{YEAR:Event\_Year} | %{TIME:SFS\_Event\_Time},%{INT:LOG\_NUMB} | %{LOGLEVEL:log-level} | %{DATA:Pool\_Thread} | %{DATA:Extension} | | { **lib** }: { Zone: %{DATA:Zone} } ELK\_SYNC\_LOG Count: %{INT:Count} UserCount: %{INT:User-Count}" }  
}  
mutate{  
convert =\> { "User-Count" =\> "integer" }  
}  
}

output {  
elasticsearch {  
hosts =\> ["[http://localhost:1311](http://localhost:1311)"]  
index =\> "logstash-%{+yyyy.MM.dd}"

My kibana shows only one index logstash\* the index is not been created on daily basis due to this my data for logs stored in single file need only last 45 days data i want to delete rest

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 10, 2020, 9:20pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/2 "2020-09-10T21:20:08Z")

</div>

Set [ilm\_enabled](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-ilm_enabled) to false.

---

<div class="post-metadata">

### Author: ![shubham\_gour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_gour/32/75396_2.png) [@shubham\_gour](https://discuss.elastic.co/u/shubham_gour)
#### Post date: [September 10, 2020, 9:22pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/3 "2020-09-10T21:22:05Z")

</div>

> [@shubham\_gour](#):
>
> My kibana shows only one index logstash\*

can you please tell what will it do as i commented this line already in my conf file

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [September 10, 2020, 9:23pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/4 "2020-09-10T21:23:14Z")

</div>

> [@shubham\_gour](#):
>
> can you please tell what will it do

I gave you a link to the documentation so that you can read about Index Lifecycle Management.

---

<div class="post-metadata">

### Author: ![shubham\_gour](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/shubham_gour/32/75396_2.png) [@shubham\_gour](https://discuss.elastic.co/u/shubham_gour)
#### Post date: [September 10, 2020, 9:24pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/5 "2020-09-10T21:24:10Z")

</div>

Thanks it would be helpful

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 8, 2020, 9:24pm UTC](https://discuss.elastic.co/t/logstash-not-creating-multiple-index/248234/6 "2020-10-08T21:24:24Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
