# Multiple ElasticSearch Indexes in Logstash Output

**URL:** https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116
**Category:** Logstash
**Created:** [April 2, 2016, 5:10am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116 "2016-04-02T05:10:18Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Sameer\_Panicker](https://avatars.discourse-cdn.com/v4/letter/s/d9b06d/32.png) [@Sameer\_Panicker](https://discuss.elastic.co/u/Sameer_Panicker)
#### Post date: [April 2, 2016, 5:10am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116/1 "2016-04-02T05:10:18Z")

</div>

if[type] == "IISLogs"  
{  
elasticsearch  
{  
index =\> "iislogs"  
hosts =\> ["myserver:9200"]  
}  
}  
else  
{  
elasticsearch  
{  
index =\> " **filebeat-2016.03.27**"  
hosts =\> ["myserver:9200"]  
}  
}

Since, filebeat indexes are created daily i.e. filebeat-YYYY-mm-dd format. How can I specify the latest index of filebeat in above output configuration. If I specify filebeat-2016.03.27, it works fine. But I want something generic.

How can I achieve that ?

---

<div class="post-metadata">

### Author: ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [April 2, 2016, 2:50pm UTC](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116/2 "2016-04-02T14:50:22Z")

</div>

See the documentation of the [elasticsearch output's `index` option](https://www.elastic.co/guide/en/logstash/current/plugins-outputs-elasticsearch.html#plugins-outputs-elasticsearch-index) and its default value. See also the [sprintf format documentation](https://www.elastic.co/guide/en/logstash/current/event-dependent-configuration.html#sprintf).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 6, 2017, 5:04am UTC](https://discuss.elastic.co/t/multiple-elasticsearch-indexes-in-logstash-output/46116/3 "2017-07-06T05:04:17Z")

</div>


