# Organize Filebeat inputs and Directory Hierarchy

**URL:** <https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [May 5, 2022, 4:52am UTC](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989 "2022-05-05T04:52:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![anushka1203](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/anushka1203/32/98018_2.png) [@anushka1203](https://discuss.elastic.co/u/anushka1203)\
**Post date:** [May 5, 2022, 4:52am UTC](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989/1 "2022-05-05T04:52:22Z")

</div>

The log files on my system are stored in the following manner.

 ![image](https://us1.discourse-cdn.com/elastic/original/3X/9/d/9d9d9dfa871db903f386263fdceebca7142a157b.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/f/e/feafc71cf3aa116192e7d4535c60d8e9354f9faf.png)  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/1/d1574b2ff7d819b1e8512dc07a8717799837bc90.png)  
and these folders finally contain the log files (access, error, audit and csv files) that need to be parsed  
example:  
 ![image](https://us1.discourse-cdn.com/elastic/original/3X/d/3/d3ffe983849a4c5e4ea635efab62103339bd51b9.png)  
since it is realtime data, new units and new folders in the units folder keep on getting added. I need help in understanding how to organize the filebeat inputs for parsing of all of this data to logstash and also **extract the unit number as a field.**  
Should I create a single index or multiple indices? A dashboard that does not require regular edits or changes is to be created finally. I need a way to create the flow such that there is minimum disturbance in the work flow.  
Help will be much appreciated.  
Thanks in advance

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 2, 2022, 6:52am UTC](https://discuss.elastic.co/t/organize-filebeat-inputs-and-directory-hierarchy/303989/2 "2022-06-02T06:52:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.