The answer is in this thread GeoIP location has added brackets and not able to visualize.
Basically, you are using the wrong config for geoip. There is no need to use mutate plugin with geoip plugin. When you use geoip plugin, it will output a bunch of fields, and location, one of the fields, has geo_point format and contains the info needed for Kibana to graph Tile maps. You just need a mapping template for the geoip fields in ES.
Below is what the mapping looks like:
"geoip": {
"dynamic": true,
"type": "object",
"properties": {
"city_name": {
"index": "not_analyzed",
"type": "string"
},
"timezone": {
"index": "not_analyzed",
"type": "string"
},
"country_code2": {
"index": "not_analyzed",
"type": "string"
},
"country_name": {
"index": "not_analyzed",
"type": "string"
},
"continent_code": {
"index": "not_analyzed",
"type": "string"
},
"location": {
"type": "geo_point",
"doc_values": true
},
"region_name": {
"index": "not_analyzed",
"type": "string"
},
"real_region_name": {
"index": "not_analyzed",
"type": "string"
},
"postal_code": {
"index": "not_analyzed",
"type": "string"
}
}
},
geoip.location is the field for Tile map in Kibana.