# \[Logstash\] Use variables with ilm in Elasticsearch output

**URL:** https://discuss.elastic.co/t/logstash-use-variables-with-ilm-in-elasticsearch-output/346697
**Category:** Logstash
**Created:** [November 8, 2023, 10:50am UTC](https://discuss.elastic.co/t/logstash-use-variables-with-ilm-in-elasticsearch-output/346697 "2023-11-08T10:50:54Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![quoctuan2311](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/quoctuan2311/32/124820_2.png) [@quoctuan2311](https://discuss.elastic.co/u/quoctuan2311)
#### Post date: [November 8, 2023, 10:50am UTC](https://discuss.elastic.co/t/logstash-use-variables-with-ilm-in-elasticsearch-output/346697/1 "2023-11-08T10:50:54Z")

</div>

Can you variables with ilm\_rollover\_alias and ilm\_policy.  
Current I use `if else` but if conditions increase with each `log_type` by created. Logstash will be increase time start it.

Pls support me with this case.

```auto
elasticsearch {
          hosts => [""]
          user => 'logstash-user'
          password => 'logstash-password'
          ilm_enabled => true
          ilm_rollover_alias => "stagenv-%{[fields][log_type]}"
          ilm_pattern => "{now/d}-000001"
          ilm_policy => "stagenv-%{[fields][log_type]}-policy"
          timeout => 5
          retry_on_conflict => 3
          retry_max_interval => 15
          retry_initial_interval => 5
          resurrect_delay => 3
        }

```

---

<div class="post-metadata">

### Author: ![Badger](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/badger/32/25190_2.png) [@Badger](https://discuss.elastic.co/u/Badger)
#### Post date: [November 8, 2023, 4:16pm UTC](https://discuss.elastic.co/t/logstash-use-variables-with-ilm-in-elasticsearch-output/346697/2 "2023-11-08T16:16:32Z")

</div>

> [@quoctuan2311](#):
>
> Can you variables with ilm\_rollover\_alias and ilm\_policy.

The [code](https://github.com/logstash-plugins/logstash-output-elasticsearch/blob/main/lib/logstash/outputs/elasticsearch/ilm.rb) doesn't appear to sprintf anything, so I would say no, you cannot.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 6, 2023, 4:16pm UTC](https://discuss.elastic.co/t/logstash-use-variables-with-ilm-in-elasticsearch-output/346697/3 "2023-12-06T16:16:41Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.