Hi @rreatiga, in the header of the props.conf stanza, you cannot use "index::current_index" but only sourcetype or source or host fields. for source and host, you can also use jolly char, something like this: props.conf [source::*dev-ksm*] TRANSFORMS-routing=filter-to-new_index [source::*int-ksm*] TRANSFORMS-routing=filter-to-new_index [source::*qa-ksm*] TRANSFORMS-routing=filter-to-new_index [source::*amq-*-ksm*] TRANSFORMS-routing=filter-to-new_index transorms.conf [filter-to-new_index] DEST_KEY = _MetaData:Index REGEX = . FORMAT = new_index Ciao. Giuseppe ... View more