# Using filename from filebeat in index pattern
**URL:** https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602
**Category:** Beats
**Tags:** filebeat
**Created:** [September 27, 2016, 11:52am UTC](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602 "2016-09-27T11:52:15Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@Anubhav\_Bimbisariye](https://discuss.elastic.co/u/Anubhav_Bimbisariye)
#### Post date: [September 27, 2016, 11:52am UTC](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602/1 "2016-09-27T11:52:16Z")
paths:
- /var/log/\*.log
The output is elasticsearch. the logs are already formatted in json, I just want index to reflect where the logs come from. In my scenario, anyone may put a file abcd.log in the logs folder. I want these logs to be sent to index abcd-19.05.2016 or something like that. Since the logs are preformatted, we dont want any logstash in between.
---
### Author:  [@steffens](https://discuss.elastic.co/u/steffens)
#### Post date: [September 29, 2016, 9:52am UTC](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602/2 "2016-09-29T09:52:16Z")
In filebeat beta1 you have some more control over configuring the index using [format strings and conditionals](https://www.elastic.co/guide/en/beats/filebeat/master/elasticsearch-output.html#_index). But there is no way in parsing and munging/changing any field to your likings. I wonder of ingest node support in ES can be used to do the manipulations required. As far as I know, ingest node allows changing an events index.
One can set additonal hints in prospectors by adding custom fields/tags per prospector.
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [October 18, 2016, 11:52am UTC](https://discuss.elastic.co/t/using-filename-from-filebeat-in-index-pattern/61602/3 "2016-10-18T11:52:32Z")
This topic was automatically closed after 21 days. New replies are no longer allowed.