# Topbeat index name appends YYYY.MM.DD

**URL:** https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908
**Category:** Beats
**Created:** [October 24, 2015, 11:52am UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908 "2015-10-24T11:52:14Z")
**Posts on this page:** 7
**Page:** 1

<div class="post-metadata">

### Author: ![Ross\_Draper](https://avatars.discourse-cdn.com/v4/letter/r/df705f/32.png) [@Ross\_Draper](https://discuss.elastic.co/u/Ross_Draper)
#### Post date: [October 24, 2015, 11:52am UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/1 "2015-10-24T11:52:14Z")

</div>

Hi Chaps

I've just started out with topbeats and imported the visualisations from github. Perhaps I've missed something, but as visualisations are tied to an index and topbeat automatically appends the date to each index daily, how are you supposed to maintain visualisations with importing/creating daily? Currently I'm skipping logstash and importing direct to ES.

My preference is to have indexes follow my current log index patterns which is [proj\_name-environment\_name-stats\_name] e.g. "cust1-uat-topbeat". "cust1-uat-logs"

Have I missed a setting somewhere? I'd like to force beats to use the EXACT config.yml specified index.

Many thanks

Ross

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 26, 2015, 5:51am UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/2 "2015-10-26T05:51:34Z")

</div>

It does this because it's easy to know which index to go to for data, and also for retention.  
It's easier to drop an index that is N days old, rather than delete data from N days ago in a multiday index.

---

<div class="post-metadata">

### Author: ![Ross\_Draper](https://avatars.discourse-cdn.com/v4/letter/r/df705f/32.png) [@Ross\_Draper](https://discuss.elastic.co/u/Ross_Draper)
#### Post date: [October 27, 2015, 3:49pm UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/3 "2015-10-27T15:49:55Z")

</div>

Thanks Mark.

I've also just realised that in Kibana I can tie a dashboard and visualisations to a index mask vs specific index so part of my problem has gone away.

---

<div class="post-metadata">

### Author: ![steffens](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/steffens/32/79630_2.png) [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [October 27, 2015, 3:54pm UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/4 "2015-10-27T15:54:17Z")

</div>

You can also use aliases in elasticsearch and use the alias from kibana if this helps.

---

<div class="post-metadata">

### Author: ![djhersey](https://avatars.discourse-cdn.com/v4/letter/d/6bbea6/32.png) [@djhersey](https://discuss.elastic.co/u/djhersey)
#### Post date: [August 1, 2016, 5:36pm UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/5 "2016-08-01T17:36:49Z")

</div>

From this comment, I assume there is no way to control topbeat from appending the YYYY.MM.DD?

---

<div class="post-metadata">

### Author: ![monica](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/monica/32/3696_2.png) [@monica](https://discuss.elastic.co/u/monica)
#### Post date: [August 1, 2016, 6:19pm UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/6 "2016-08-01T18:19:51Z")

</div>

Currently you cannot configure the index pattern in Elasticsearch, but there is already a [PR](https://github.com/elastic/beats/pull/2119) opened, that you can follow.  
Please also notice that Topbeat is replaced with Metricbeat in 5.0. Please read more in the [blog post](https://www.elastic.co/blog/beats-5-0-0-alpha3-released).

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 9:50pm UTC](https://discuss.elastic.co/t/topbeat-index-name-appends-yyyy-mm-dd/32908/7 "2017-07-05T21:50:49Z")

</div>


