# Specify index when using elasticsearch logstash filter

**URL:** <https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928>\
**Category:** Logstash\
**Created:** [June 4, 2015, 12:14pm UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928 "2015-06-04T12:14:37Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![lwintergerst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lwintergerst/32/18164_2.png) [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Post date:** [June 4, 2015, 12:14pm UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/1 "2015-06-04T12:14:37Z")

</div>

Is it possible to specify an Index when I use the elasticsearch logstash filter? I can't possibly let it search through everything.

My google searches did not bring me any further, since googling for something with the words 'logstash, elasticsearch, filter' often leads to wrong results..

---

<div class="post-metadata">

**Author:** ![magnusbaeck](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/magnusbaeck/32/44943_2.png) [@magnusbaeck](https://discuss.elastic.co/u/magnusbaeck)\
**Post date:** [June 4, 2015, 12:46pm UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/2 "2015-06-04T12:46:05Z")

</div>

Are you talking about the elasticsearch _input_? Yes, it has an [`index` parameter](https://www.elastic.co/guide/en/logstash/current/plugins-inputs-elasticsearch.html#plugins-inputs-elasticsearch-index).

---

<div class="post-metadata">

**Author:** ![niksfirefly](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/niksfirefly/32/498_2.png) [@niksfirefly](https://discuss.elastic.co/u/niksfirefly)\
**Post date:** [June 4, 2015, 1:23pm UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/3 "2015-06-04T13:23:49Z")

</div>

no ES filter does not yet has that option  
but you can patch and add that option easily

---

<div class="post-metadata">

**Author:** ![lwintergerst](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/lwintergerst/32/18164_2.png) [@lwintergerst](https://discuss.elastic.co/u/lwintergerst)\
**Post date:** [June 5, 2015, 7:57am UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/4 "2015-06-05T07:57:26Z")

</div>

Thanks for the responses.

@magnus, i was taling about [http://logstash.net/docs/1.4.2/filters/elasticsearch](http://logstash.net/docs/1.4.2/filters/elasticsearch)  
But niksfirefly answered the question already. Thanks!

---

<div class="post-metadata">

**Author:** ![galileoc](https://avatars.discourse-cdn.com/v4/letter/g/4491bb/32.png) [@galileoc](https://discuss.elastic.co/u/galileoc)\
**Post date:** [June 24, 2017, 8:17pm UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/5 "2017-06-24T20:17:51Z")

</div>

> [@niksfirefly](#):
>
> but you can patch and add that option easily

hi niksfirefly, i'm in this trouble too, the logstash-filter-elasticsearch index param couldn't input like %{+YYYYMMDD}, since all my indices are in this format and i don't want to search for everything, how could i patch it?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 19, 2018, 3:25am UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/6 "2018-01-19T03:25:46Z")

</div>



---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [January 19, 2018, 3:26am UTC](https://discuss.elastic.co/t/specify-index-when-using-elasticsearch-logstash-filter/1928/7 "2018-01-19T03:26:01Z")

</div>

Please start a new thread 🙂
