Here is the thread I followed to troubleshoot and able to query the logs correctly based on lon/lat but not sure why that error is appearing
echo 37.58.58.206 | /usr/share/logstash/bin/logstash -f /etc/logstash/conf.d/test.config
09:30:55.665 [Api Webserver] INFO logstash.agent - Successfully started Logstash API endpoint {:port=>9601}
{
"@timestamp" => 2017-08-26T04:00:55.645Z,
"geoip" => {
"ip" => "37.58.58.206",
"latitude" => 51.2993,
"country_name" => "Germany",
"country_code2" => "DE",
"continent_code" => "EU",
"country_code3" => "DE",
"location" => {
"lon" => 9.491,
"lat" => 51.2993
},
"longitude" => 9.491
},
"@version" => "1",
"host" => "0.0.0.0",
"message" => "37.58.58.206"