# Multiple Elasticsearch documents in Logstash output

**URL:** <https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638>\
**Category:** Logstash\
**Created:** [August 10, 2016, 1:58am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638 "2016-08-10T01:58:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![rpazhyannur](https://avatars.discourse-cdn.com/v4/letter/r/f07891/32.png) [@rpazhyannur](https://discuss.elastic.co/u/rpazhyannur)\
**Post date:** [August 10, 2016, 1:58am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638/1 "2016-08-10T01:58:31Z")

</div>

I am receiving a JSON object via HTTP Poller and I need to split it up and write into the multiple documents in Elasticsearch.  
For example, what I get from HTTP poller is something like this  
{  
bank:[  
{  
id: 100,  
balance: 20  
},  
{  
id: 101,  
balance: 200  
},  
{  
id: 102,  
balance: 2000  
]  
}

and I need to output three documents into Elasticsearch. For example  
index=bank  
document=account  
document\_id = 100  
{id:100,balance=20}

index=bank  
document=account  
document\_id = 101  
{id:101,balance=200}

index=bank  
document=account  
document\_id = 102  
{id:102,balance=2000}

I am a novice as far as Logstash and Elasticsearch are concerned, so do appreciate help in the form of pointers/references/examples.

thanks

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [August 10, 2016, 6:05am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638/2 "2016-08-10T06:05:14Z")

</div>

Have a look at the split filter.

---

<div class="post-metadata">

**Author:** ![rpazhyannur](https://avatars.discourse-cdn.com/v4/letter/r/f07891/32.png) [@rpazhyannur](https://discuss.elastic.co/u/rpazhyannur)\
**Post date:** [August 10, 2016, 3:37pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638/3 "2016-08-10T15:37:22Z")

</div>

Thank you very much.  
For others in future, this is what worked for me  
filter{split{field=\>"bank"}}

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 4:43am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-documents-in-logstash-output/57638/4 "2017-07-06T04:43:59Z")

</div>