# Suggestion for AWS Cloudtrail Logging!

**URL:** <https://discuss.elastic.co/t/suggestion-for-aws-cloudtrail-logging/74787>\
**Category:** Logstash\
**Created:** [February 12, 2017, 6:29am UTC](https://discuss.elastic.co/t/suggestion-for-aws-cloudtrail-logging/74787 "2017-02-12T06:29:45Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![niraj\_kumar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/niraj_kumar/32/4130_2.png) [@niraj\_kumar](https://discuss.elastic.co/u/niraj_kumar)\
**Post date:** [February 12, 2017, 6:29am UTC](https://discuss.elastic.co/t/suggestion-for-aws-cloudtrail-logging/74787/1 "2017-02-12T06:29:45Z")

</div>

Hello,

We have multiple cloudtrail accounts in our s3 bucket. eg:-

my- bucket --\> AwsLogs --\> 12312312312 --\> team-x  
12312312222 --\> team-y  
22222222222 --\> team-z

We want to ingest all the logs via logstash but we want to name the index based on each account number.

So when logstash tries to ingest data from 12312312312 folder/prefix it should index it with name team-x-YYYY-MM-DD and so on with other prefixes as well.

Let me know if you wanna know or want me to explain more on my need.

--  
Niraj

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [March 12, 2017, 6:30am UTC](https://discuss.elastic.co/t/suggestion-for-aws-cloudtrail-logging/74787/2 "2017-03-12T06:30:09Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.