# Specifying index name from filebeat to logstash
**URL:** https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704
**Category:** Beats
**Created:** [July 17, 2016, 10:01pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704 "2016-07-17T22:01:30Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@dal](https://discuss.elastic.co/u/dal)
#### Post date: [July 17, 2016, 10:01pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/1 "2016-07-17T22:01:30Z")
I am trying to setup my ELK pipeline. I have filebeat monitoring on one VM and my logstash and elasticsearch instances running on another. When I make an update to the file which specified in filebeat.yml, I see that change reflected in logstash (logstash,conf also prints to stdout). In my filebeat.yml under the logstash section I specify the index name as "demo". When I try to search for that index in elasticsearch, I get an error response.
So, was the change not added to elasticsearch, or am I specifying the index name incorrectly? I think it's the latter because I was following a tutorial to set this up, and ES is checked to contain the right information by using a different index name, but I don't know how that index name was specified.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 17, 2016, 10:02pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/2 "2016-07-17T22:02:26Z")
Providing your beats config would be helpful.
---
### Author:  [@dal](https://discuss.elastic.co/u/dal)
#### Post date: [July 18, 2016, 12:09pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/3 "2016-07-18T12:09:20Z")
These are all the uncommented lines in my beat config
```
filebeat:
prospectors:
-
paths:
- /path/to/mylog.log
input_type: log
logstash:
hosts:
- my.logstash_instance.com:5044
index: demo
shipper:
group
logging:
```
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [July 18, 2016, 9:12pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/4 "2016-07-18T21:12:15Z")
Ok that looks normal.
What about LS?
---
### Author:  [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [July 19, 2016, 9:53am UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/5 "2016-07-19T09:53:49Z")
what's this `group` in your config file is about? It doesn't seem to belong anywhere.
---
### Author:  [@dal](https://discuss.elastic.co/u/dal)
#### Post date: [July 19, 2016, 11:18am UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/6 "2016-07-19T11:18:20Z")
Here
```
input {
beats {
port => 5044
}
}
filter {
grok {
match => {"message" => "%{COMBINEDAPACHELOG}"}
}
geoip {
source => "clientip"
}
}
output {
elasticsearch {
}
stdout { }
}
```
Where is the index **supposed** to be specified?
---
### Author:  [@dal](https://discuss.elastic.co/u/dal)
#### Post date: [July 19, 2016, 11:18am UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/7 "2016-07-19T11:18:46Z")
I don't know, but by default it's uncommented
---
### Author:  [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [July 19, 2016, 2:02pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/8 "2016-07-19T14:02:31Z")
1. that's weird. should not be uncommented.
2. check out [logstash elasticsearch output docs](https://www.elastic.co/guide/en/logstash/2.3/plugins-outputs-elasticsearch.html). The index option is normally used to configure the index. You can use any fields in your event to construct your index.
---
### Author:  [@dal](https://discuss.elastic.co/u/dal)
#### Post date: [July 19, 2016, 2:06pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/9 "2016-07-19T14:06:14Z")
that works. thanks!
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:50pm UTC](https://discuss.elastic.co/t/specifying-index-name-from-filebeat-to-logstash/55704/10 "2017-07-05T21:50:56Z")