I have a problem with the geo_point type. I already applied a template on Elasticsearch to transform the data i get into a geo_point. This data is supposed to be the parameter location.
I don't receive it from the log, that's why i want to add a new field named location by using the add_field property.
I receive the logs in this format: 08-07-2016 14:10:22.039 country=Germany,lat=52,lon=12
Thus, i would like to construct a parameter Location, parent of lat and lon to match my template.
My filter in logstash for this line looks like this:
First of all, i don't know if changing the type of lat and lon before is the right way to do it or not.
Then, the second problem is that the add_field value seems to block the data. I'm also supposed to receive other logs through the same filter. However, no data are received in ES and Kibana at all.
I made a test by removing this field and it seemed to work. But i need this field
If you have some ideas.
If you need more informations don't hesitate.
Thank you for your attention.