# Use multiple filters on multiple indices and multiple rules in same rule file in elastalert

**URL:** <https://discuss.elastic.co/t/use-multiple-filters-on-multiple-indices-and-multiple-rules-in-same-rule-file-in-elastalert/88551>\
**Category:** Elasticsearch\
**Created:** [June 7, 2017, 9:55am UTC](https://discuss.elastic.co/t/use-multiple-filters-on-multiple-indices-and-multiple-rules-in-same-rule-file-in-elastalert/88551 "2017-06-07T09:55:24Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Kiranmai\_Reddy](https://avatars.discourse-cdn.com/v4/letter/k/50afbb/32.png) [@Kiranmai\_Reddy](https://discuss.elastic.co/u/Kiranmai_Reddy)\
**Post date:** [June 7, 2017, 9:55am UTC](https://discuss.elastic.co/t/use-multiple-filters-on-multiple-indices-and-multiple-rules-in-same-rule-file-in-elastalert/88551/1 "2017-06-07T09:55:24Z")

</div>

I want to run multiple queries on multiple indices of elasticsearch in elastalert. How can I do that?  
example : I want to use the first filter with rule type "any" on index abc\* and the second filter with rule type "frequency" on index xyz\*

> type :any  
> type:frequency  
> index: abc\*  
> index: xyz\*  
> filter:
> 
> - match:  
> loglevel: "INFO"  
> filter:  
> - match:  
> loglevel: "ERROR"

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 9:55am UTC](https://discuss.elastic.co/t/use-multiple-filters-on-multiple-indices-and-multiple-rules-in-same-rule-file-in-elastalert/88551/2 "2017-07-05T09:55:39Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.