---
title: fastly service logging elasticsearch update
summary: Update an Elasticsearch logging endpoint on a Fastly service version
url: https://www.fastly.com/documentation/reference/cli/service/logging/elasticsearch/update
---

Update an Elasticsearch logging endpoint on a Fastly service version

## Flags

| Flag | Description | Required | Default |
|------|-------------|----------|----------|
| `--name` | The name of the Elasticsearch logging object | Yes | - |
| `--version` | 'latest', 'active', 'staged', or the number of a specific Fastly service version | Yes | - |
| `--autoclone` | If the selected service version is not editable, clone it and use the clone. | No | - |
| `--format` | Apache style log formatting. Your log must produce valid JSON. Can be a string or a file path to a file containing formatting | No | - |
| `--format-version` | The version of the custom logging format used for the configured endpoint. Can be either 2 (the default, version 2 log format) or 1 (the version 1 log format). The logging call gets placed by default in vcl_log if format_version is set to 2 and in vcl_deliver if format_version is set to 1 | No | - |
| `--index` | The name of the Elasticsearch index to send documents (logs) to. The index must follow the Elasticsearch index format rules (https://www.elastic.co/guide/en/elasticsearch/reference/current/indices-create-index.html). We support strftime (http://man7.org/linux/man-pages/man3/strftime.3.html) interpolated variables inside braces prefixed with a pound symbol. For example, #{%F} will interpolate as YYYY-MM-DD with today's date | No | - |
| `--new-name` | New name of the Elasticsearch logging object | No | - |
| `--pipeline` | The ID of the Elasticsearch ingest pipeline to apply pre-process transformations to before indexing. For example my_pipeline_id. Learn more about creating a pipeline in the Elasticsearch docs (https://www.elastic.co/guide/en/elasticsearch/reference/current/ingest.html) | No | - |
| `--placement` | Where in the generated VCL the logging call should be placed, overriding any format_version default. Can be none or waf_debug. This field is not required and has no default value | No | - |
| `--processing-region` | The region where logs will be processed before streaming to Elasticsearch. One of 'none', 'eu', or 'us'. Defaults to 'none' for no specific region | No | - |
| `--request-max-bytes` | Maximum size of log batch, if non-zero. Defaults to 100MB | No | - |
| `--request-max-entries` | Maximum number of logs to append to a batch, if non-zero. Defaults to 10k | No | - |
| `--response-condition` | The name of an existing condition in the configured endpoint, or leave blank to always execute | No | - |
| `--service-id` | Service ID (falls back to FASTLY_SERVICE_ID, then fastly.toml) | No | - |
| `--service-name` | The name of the service | No | - |
| `--tls-ca-cert` | A secure certificate to authenticate the server with. Must be in PEM format | No | - |
| `--tls-client-cert` | The client certificate used to make authenticated requests. Must be in PEM format | No | - |
| `--tls-client-key` | The client private key used to make authenticated requests. Must be in PEM format | No | - |
| `--tls-hostname` | Used during the TLS handshake to validate the certificate | No | - |
| `--url` | The URL to stream logs to. Must use HTTPS. | No | - |

## Global options

| Flag | Description | Required | Default |
|------|-------------|----------|----------|
| `--help` | Show context-sensitive help. | No | - |
| `--accept-defaults` | Accept default options for all interactive prompts apart from Yes/No confirmations | No | - |
| `--auto-yes` | Answer yes automatically to all Yes/No confirmations. This may suppress security warnings | No | - |
| `--debug-mode` | Print API request and response details (NOTE: can disrupt the normal CLI flow output formatting) | No | - |
| `--non-interactive` | Do not prompt for user input - suitable for CI processes. Equivalent to --accept-defaults and --auto-yes | No | - |
| `--quiet` | Silence all output except direct command output. This won't prevent interactive prompts (see: --accept-defaults, --auto-yes, --non-interactive) | No | - |
| `--token` | Fastly API token, or name of a stored auth token (use 'default' for the default token). Falls back to FASTLY_API_TOKEN env var | No | - |
| `--verbose` | Verbose logging | No | - |