# Existing Elasticsearch and Graylog

**URL:** <https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421>\
**Category:** Graylog Central (peer support)\
**Created:** [September 12, 2017, 7:01am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421 "2017-09-12T07:01:22Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![buddy\_spencer](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/buddy_spencer/32/859_2.png) [@buddy\_spencer](https://community.graylog.org/u/buddy_spencer)\
**Post date:** [September 12, 2017, 7:01am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/1 "2017-09-12T07:01:22Z")

</div>

Hi,

I would like to ask if it is possible to get the existing indices in Graylog?

---

<div class="post-metadata">

**Author:** ![jan](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jan/32/11_2.png) [@jan](https://community.graylog.org/u/jan)\
**Post date:** [September 12, 2017, 7:04am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/2 "2017-09-12T07:04:55Z")

</div>

hej @budy\_spencer

you can go in the graylog web interface to **sytem / indices** to get the list of Graylog indices in Elasticsearch.

If that is not what you are looking for, please be a little more specific.

regards  
Jan

---

<div class="post-metadata">

**Author:** ![buddy\_spencer](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/buddy_spencer/32/859_2.png) [@buddy\_spencer](https://community.graylog.org/u/buddy_spencer)\
**Post date:** [September 12, 2017, 7:08am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/3 "2017-09-12T07:08:48Z")

</div>

I am writing my logs directly into elasticsearch with beats and my question is if I there is a possibility to get those indices in graylog.  
From what I saw so far I can only get the indices which I defined directly in Graylog.

---

<div class="post-metadata">

**Author:** ![jochen](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/jochen/32/8_2.png) [@jochen](https://community.graylog.org/u/jochen)\
**Post date:** [September 12, 2017, 7:33am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/4 "2017-09-12T07:33:59Z")

</div>

> [@buddy\_spencer](#):
>
> From what I saw so far I can only get the indices which I defined directly in Graylog.

That’s correct and it’s the intended mode of operation for Graylog.

Importing indices written directly into Elasticsearch is not supported. If you’re really desperate to get these into Graylog, you could use the Logstash Elasticsearch input to read from Elasticsearch and the Logstash GELF output to send the documents to your Graylog cluster for reindexing.

---

<div class="post-metadata">

**Author:** ![buddy\_spencer](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/buddy_spencer/32/859_2.png) [@buddy\_spencer](https://community.graylog.org/u/buddy_spencer)\
**Post date:** [September 12, 2017, 7:55am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/5 "2017-09-12T07:55:18Z")

</div>

Too bad, but thank you anyway. I think I am going to build a new cluster beside my current Elasticsearch and Kibana thingy. The user authentication and the permssion handling in Graylog is just splendid.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\
**Post date:** [September 26, 2017, 7:55am UTC](https://community.graylog.org/t/existing-elasticsearch-and-graylog/2421/6 "2017-09-26T07:55:22Z")

</div>

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.