# Logstash out put based on log.file.path
**URL:** https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766
**Category:** Logstash
**Created:** [August 26, 2019, 12:23pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766 "2019-08-26T12:23:39Z")
**Posts on this page:** 9
**Page:** 1
### Author:  [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)
#### Post date: [August 26, 2019, 12:23pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/1 "2019-08-26T12:23:39Z")
Hello everyone,
i have a very basic logstash configuration file.getting multiple log from filebeat.
what i want to do is having different index based on file path.this is what i have done so far for output section:
output {
if [log.file.path] == "/etc/logstash/work\_test/something/something.log" {
elasticsearch {
hosts =\> ["localhost:9200"]
index =\> "something"
}
}
else {
elasticsearch {
hosts =\> ["localhost:9200"]
index =\> "somethingelse"
}
}
}
but the result is one index names something else...it seems that if section is not working but else is working.
what is wrong?
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [August 26, 2019, 1:43pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/2 "2019-08-26T13:43:57Z")
I expect you need [log][file][path] rather than [log.file.path]
---
### Author:  [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)
#### Post date: [August 26, 2019, 1:55pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/3 "2019-08-26T13:55:47Z")
Thanks for your reply
You mean if [log] [file] [path] == something {} ?
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [August 26, 2019, 2:07pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/4 "2019-08-26T14:07:51Z")
Yes, but there should not be spaces embedded in it.
---
### Author:  [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)
#### Post date: [August 26, 2019, 2:15pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/5 "2019-08-26T14:15:23Z")
Ok thx i will test it and let you know
---
### Author:  [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)
#### Post date: [August 26, 2019, 5:45pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/6 "2019-08-26T17:45:51Z")
it works.thanks alot
but actually i do not understand why it must be written like this.could you explain it?
---
### Author:  [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [August 26, 2019, 5:59pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/7 "2019-08-26T17:59:35Z")
If [log] is an object that contains a field called [file] then in kibana you can refer to log.file, but in logstash you have to refer to [log][file]. It just has a different syntax.
---
### Author:  [@Mohammad.ali](https://discuss.elastic.co/u/Mohammad.ali)
#### Post date: [August 26, 2019, 6:12pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/8 "2019-08-26T18:12:52Z")
woooowwww..many thanks for your explanation
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 23, 2019, 6:13pm UTC](https://discuss.elastic.co/t/logstash-out-put-based-on-log-file-path/196766/9 "2019-09-23T18:13:04Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.