# Rename the WinlogBeat index
**URL:** https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604
**Category:** Beats
**Tags:** winlogbeat
**Created:** [February 13, 2018, 9:32am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604 "2018-02-13T09:32:48Z")
**Posts on this page:** 7
**Page:** 1
### Author:  [@Adren](https://discuss.elastic.co/u/Adren)
#### Post date: [February 13, 2018, 9:32am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/1 "2018-02-13T09:32:48Z")
Hello,
I installed and configured winlogbeat to send his logs to logstash and it's successful. My question is, now, I want to change the name of the index in kibana, all I see is this by example:
The index I pointed out in the screen is the logs from winlogbeat, but how do you change the name of the index ? I want "Winlogbeat-2018-02-13" for example.
I tried to put these lines to the configuration file from Winlogbeat but it's not a success
winlogbeat.event\_logs:
- name: Security
ignore\_older: 168h
```
output.logstash:
hosts: ["localhost:5044"]
setup.template.name: "winlogbeat-%{[beat.version]}"
setup.template.pattern: "winlogbeat-%{[beat.version]}-*"
```
---
### Author:  [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [February 13, 2018, 10:05am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/2 "2018-02-13T10:05:32Z")
Hi,
As you're using logstash to send the events to elasticsearch, the index name must be configured in logstash and not filebeat.
You need to add the following lines to your logstash configuration:
```auto
input {
beats {
port => 5044
}
}
output {
elasticsearch {
hosts => ["http://localhost:9200"]
index => "%{[@metadata][beat]}-%{[@metadata][version]}-%{+YYYY.MM.dd}"
}
}
```
Have a look at the [logstash output configuration docs](https://www.elastic.co/guide/en/beats/winlogbeat/current/logstash-output.html)
---
### Author:  [@Adren](https://discuss.elastic.co/u/Adren)
#### Post date: [February 13, 2018, 10:10am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/3 "2018-02-13T10:10:02Z")
Thanks a lot, it's working !
Regards.
---
### Author:  [@PandKing](https://discuss.elastic.co/u/PandKing)
#### Post date: [February 28, 2018, 4:22pm UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/4 "2018-02-28T16:22:24Z")
So is the current Logstash beats input documentation incompatible with the current beats documentation and default setup?
Also haven't seen anything yet that speaks to the purpose of the version in the index, does anyone have ref material?
[https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-beats.html)
[https://www.elastic.co/guide/en/beats/winlogbeat/current/logstash-output.html](https://www.elastic.co/guide/en/beats/winlogbeat/current/logstash-output.html)
Thanks
---
### Author:  [@adrisr](https://discuss.elastic.co/u/adrisr)
#### Post date: [February 28, 2018, 7:31pm UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/5 "2018-02-28T19:31:18Z")
Thanks for bringing up this inconsistency between beats and logstash docs, we'll fix it.
About the version being included in the index name, it helps to ensure the index always has the correct index template applied to it. It makes the update process easier and also allows to run different versions of the same beat at the same time. See the [pull request](https://github.com/elastic/beats/pull/3527) that introduced it.
---
### Author:  [@PandKing](https://discuss.elastic.co/u/PandKing)
#### Post date: [March 2, 2018, 5:48am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/6 "2018-03-02T05:48:24Z")
Thanks for the quick turnaround! I see the docs have been updated.
ALSO: The winlogbeat documentation references unix pathnames
[https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-path.html](https://www.elastic.co/guide/en/beats/winlogbeat/current/configuration-path.html)
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [March 30, 2018, 5:48am UTC](https://discuss.elastic.co/t/rename-the-winlogbeat-index/119604/7 "2018-03-30T05:48:41Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.