title: How can I configure an index pattern?
body: <p>I have a system using several docker images logging into a syslog-ng.
  Syslog-ng is configured to write into files all the streams camming from the other containers.
  This part works well and I am getting logs like that:</p>
  
  <pre><code>2016-01-04T20:28:38+03:00 197.23.42.1 1 2016-01-04T14:28:38.197-03:00 adad20179cfb server-zuul - Audit - Mapped URL path [/micro-sacca-movimientos/**] onto handler of type [class org.springframework.cloud.netflix.zuul.web.ZuulController]
  2016-01-04T20:30:29+03:00 197.23.42.1 1 2016-01-04T14:30:29.725-03:00 47dabf38eb34 server-zuul - Audit - Mapped URL path [/micro-sacca-movimientos/**] onto handler of type [class org.springframework.cloud.netflix.zuul.web.ZuulController]
  2016-01-04T20:33:24+03:00 197.23.42.1 1 2016-01-04T14:33:24.447-03:00 47dabf38eb34 server-zuul - Audit - Flipping property: micro-sacca-movimientos.ribbon.ActiveConnectionsLimit to use NEXT property: niws.loadbalancer.availabilityFilteringRule.activeConnectionsLimit = 2147483647
  2016-01-04T20:33:24+03:00 197.23.42.1 1 2016-01-04T14:33:24.455-03:00 47dabf38eb34 server-zuul - Audit - Client:micro-sacca instantiated a LoadBalancer:DynamicServerListLoadBalancer:{NFLoadBalancer:name=micro-sacca-movimientos,current list of Servers=[],Load balancer stats=Zone stats: {},Server stats: []}ServerList:null
  </code></pre>
  
  <p>Then I try to configure thath image:</p>
  
  <p><a href="https://hub.docker.com/r/willdurand/elk/" rel="nofollow">https://hub.docker.com/r/willdurand/elk/</a></p>
  
  <p>I mapped the logs path and setted this config for logstash:</p>
  
  <pre><code>input { 
      file {
          path =&gt; ["/var/log/syslog-ng/20160104/*.log"]
          start_position =&gt; "beginning"
      }
  }
  </code></pre>
  
  <p>Then I startd the image and entered to Kibana 4 interface.
  I tried with patterns like:</p>
  
  <p>YYYY.MM.DD and YYYY-MM-DD but I never be able to create the index to start using Kibana.</p>
  
  <p>What am I doing wrong with the index pattern?
  Or I missplace some docker image configuration?</p>