# Tagging - Gotta be an easier way

**URL:** <https://discuss.elastic.co/t/tagging-gotta-be-an-easier-way/20403>\
**Category:** Elasticsearch\
**Created:** [October 23, 2014, 4:30pm UTC](https://discuss.elastic.co/t/tagging-gotta-be-an-easier-way/20403 "2014-10-23T16:30:47Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Billy\_F](https://avatars.discourse-cdn.com/v4/letter/b/e19adc/32.png) [@Billy\_F](https://discuss.elastic.co/u/Billy_F)\
**Post date:** [October 23, 2014, 4:30pm UTC](https://discuss.elastic.co/t/tagging-gotta-be-an-easier-way/20403/1 "2014-10-23T16:30:47Z")

</div>

Hi all,

A little new to the ELK stack and syslog in general and have questions.

I want to make it as simple as possible for my folks to search inside ELK.  
In my case I have a multiple datacenters and different technology stacks.  
What I want to do is have a list of servers (somewhere) and tag them as  
they are coming into Logstash so it’s easier for folks to search/me to  
create dashboards.

Loc1Myhost1 - Add Tags [Loc1] [Applicaiton1] [SQLServer]

Loc1Myhost2 - Add Tags [Loc1] [Applicaiton2] [WebServer]

Loc2Myhost7 - Add Tags [Loc2] [hypervisor1] [SQLServer]

Loc3Myhost9 - Add Tags [Loc3] [Hypervisor2] [WebServer]

I’ve been looking at the filter mechanism and don’t see any good examples  
of how this might be accomplished. Or am I doing this the hard way?

Thanks,

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/151bab47-a1b2-4609-b712-0b825326affa%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/151bab47-a1b2-4609-b712-0b825326affa%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 12:54am UTC](https://discuss.elastic.co/t/tagging-gotta-be-an-easier-way/20403/2 "2017-07-06T00:54:10Z")

</div>


