# Syslog index
**URL:** https://discuss.elastic.co/t/syslog-index/46654
**Category:** Elasticsearch
**Created:** [April 7, 2016, 9:43am UTC](https://discuss.elastic.co/t/syslog-index/46654 "2016-04-07T09:43:05Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@brayndasilva](https://discuss.elastic.co/u/brayndasilva)
#### Post date: [April 7, 2016, 9:43am UTC](https://discuss.elastic.co/t/syslog-index/46654/1 "2016-04-07T09:43:05Z")
Hi,
I currently have one index with fields for Syslog and NETFlow at the same time and can visualize them both on the Discover tab on Kibana.
Would I be able to create a seperate index for just my incoming Syslogs? I tried looking up how to make a index and managed to create a test one, but I don't understand how I can tell that it's gonna process Syslogs and have the required fields/template for it.
Because my test index is just empty right now. I can select it on Kibana when creating a new index, but it has no time fields or whatever to select.
Can someone guide me?
---
### Author:  [@mourlos](https://discuss.elastic.co/u/mourlos)
#### Post date: [April 7, 2016, 3:43pm UTC](https://discuss.elastic.co/t/syslog-index/46654/2 "2016-04-07T15:43:59Z")
You can split them based on their hosts. I 've done something similar based on the type.
`
output {
if [type] == "filesystem" {
elasticsearch {
hosts => ["localhost:9200"]
index => ["logstash-%{+YYY.MM.dd}"]
}
}
else if [type] == "http" {
elasticsearch {
hosts => ["localhost:9200"]
index => ["packetbeat-%{+YYYY.MM.dd}"]
}
}
else if [type] == "syslog" {
elasticsearch {
hosts => ["localhost:9200"]
index => ["filebeat-%{+YYYY.MM.dd}"]
}
}
else {
elasticsearch {
hosts => ["localhost:9200"]
index => ["topbeat-%{+YYYY.MM.dd}"]
}
}
}
`
Of course you can use any name you want for the indexing.
Hope this helps.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:01pm UTC](https://discuss.elastic.co/t/syslog-index/46654/3 "2017-07-05T23:01:26Z")