# Possible to add to @metadata?
**URL:** https://discuss.elastic.co/t/possible-to-add-to-metadata/42592
**Category:** Beats
**Tags:** filebeat
**Created:** [February 24, 2016, 1:41pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592 "2016-02-24T13:41:03Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@whitej](https://discuss.elastic.co/u/whitej)
#### Post date: [February 24, 2016, 1:41pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/1 "2016-02-24T13:41:03Z")
Is it possible to add information to the @metadata field? Or perhaps there's a better way to accomplish what I'm trying to do.
I have multiple prospectors set up on each machine. Each prospector is consuming logs from specific applications of the system. On each prospector, I've configured the document\_type to describe the log file I'm consuming. They are basically named like this: "muffin\_debuglog", "biscuit\_debuglog", "jelly\_debuglog", etc. My logstash output is sending all these into one index since my output is straight out of the example documentation:
`output { elasticsearch { hosts => "localhost:9200" manage_template => false index => "%{[@metadata][beat]}-%{+YYYY.MM.dd}" document_type => "%{[@metadata][type]}" } }`
My thinking was that I could do something like this: `index => "%{[@metadata][beat]}-%{[@metadata][application_name]}-%{+YYYY.MM.dd}"`
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 24, 2016, 1:42pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/2 "2016-02-24T13:42:42Z")
The `fields` option in the Filebeat configuration can be used to add arbitrary additional fields to events.
---
### Author:  [@whitej](https://discuss.elastic.co/u/whitej)
#### Post date: [February 24, 2016, 1:44pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/3 "2016-02-24T13:44:59Z")
I saw that in the configuration and thought "maybe this is the way to go". So I would add a fields: declaration to my filebeat yaml. Easy. In the output section of the Logstash configuration, would it just be something like %{[fields][application\_name]}?
---
### Author:  [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)
#### Post date: [February 24, 2016, 1:47pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/4 "2016-02-24T13:47:55Z")
Something like that, obviously depending on the actual name of the field.
---
### Author:  [@whitej](https://discuss.elastic.co/u/whitej)
#### Post date: [February 24, 2016, 1:49pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/5 "2016-02-24T13:49:24Z")
Excellent. Thank you for the assist. Gonna go give this a go. What's the worst that could possibly happen, right? 🙂
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:55pm UTC](https://discuss.elastic.co/t/possible-to-add-to-metadata/42592/6 "2017-07-05T21:55:27Z")