# Trying to change filebeat index

**URL:** <https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [October 26, 2022, 11:24pm UTC](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564 "2022-10-26T23:24:26Z")\
**Posts on this page:** 1\
**Showing post:** 5

<div class="post-metadata">

**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\
**Post date:** [October 27, 2022, 9:21pm UTC](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564/5 "2022-10-27T21:21:26Z")

</div>

Apologies, not sure what's going on. I'm not getting the full thread until I reply... 7.17.

Try adding

`setup.ilm.enabled: false`

I think I went through a couple different methods of this and why the certain settings work here

> [@Filebeat writing to its own index](https://discuss.elastic.co/t/filebeat-writing-to-its-own-index/310842/28):
>
> As explained in the post I linked, You have a moduled enabled in your configuration whether it is important now or not... It overrides the output settings in some cases but let's put that aside there are other issues... Also from the docs [here](https://www.elastic.co/guide/en/beats/filebeat/7.12/elasticsearch-output.html#index-option-es)... which is your key issue... When [index lifecycle management (ILM)](https://www.elastic.co/guide/en/beats/filebeat/7.12/ilm.html) is enabled, the default index is "filebeat-%{[agent.version]}-%{+yyyy.MM.dd}-%{index\_num}" , for example, "filebeat-7.12.1-2022-07-28-000001" . Custom index settings are ignored when…

so I think you need

```auto
setup.ilm.enabled: false
setup.template:
    enabled: true
    name: "suricata"
    pattern: "suricata-*"

```

---

_[View the full topic](https://discuss.elastic.co/t/trying-to-change-filebeat-index/317564)._