# Naming filebeat logs

**URL:** <https://discuss.elastic.co/t/naming-filebeat-logs/207042>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [November 8, 2019, 4:46am UTC](https://discuss.elastic.co/t/naming-filebeat-logs/207042 "2019-11-08T04:46:34Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![pk.241011](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pk.241011/32/86285_2.png) [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Post date:** [November 8, 2019, 4:46am UTC](https://discuss.elastic.co/t/naming-filebeat-logs/207042/1 "2019-11-08T04:46:34Z")

</div>

I think I was trying something ambitious. Creating separate logs

```
logging.level: info
logging.to_files: true
logging.files:
    - name: test1
      when.contains:
        fields.log_source: "test1"
    - name: test2
      when.contains:
        fields.log_source: "test2"
    - name: test3
      when.contains:
        fields.log_source: "test3"        
 keepfiles: 7
 permissions: 0644

```

Is it possible? No big deal if it is not.

---

<div class="post-metadata">

**Author:** ![exekias](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/exekias/32/28718_2.png) [@exekias](https://discuss.elastic.co/u/exekias)\
**Post date:** [November 15, 2019, 9:07am UTC](https://discuss.elastic.co/t/naming-filebeat-logs/207042/2 "2019-11-15T09:07:13Z")

</div>

Hi @pk.241011,

This is not possible as of today. Could you tell us a little big more about your use case? Something you could do is running different instances of Filebeat

---

<div class="post-metadata">

**Author:** ![pk.241011](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/pk.241011/32/86285_2.png) [@pk.241011](https://discuss.elastic.co/u/pk.241011)\
**Post date:** [November 20, 2019, 1:08am UTC](https://discuss.elastic.co/t/naming-filebeat-logs/207042/3 "2019-11-20T01:08:54Z")

</div>

Filebeat is running as a service on the Windows machine. I am using the `filebeat.config.inputs` to load yml's from multiple folders, one for each system generating logs. It would be nice if I could dump the logs in different files, one for each of the system I am collecting the logs from. Makes it easy to look for errors.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [December 18, 2019, 1:08am UTC](https://discuss.elastic.co/t/naming-filebeat-logs/207042/4 "2019-12-18T01:08:56Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.