Can't use maps with geoip

Elastic Stack Logstash
1

Hello,

I am trying to use the maps visualization in kibana with the geo_ip but the maps dashboard dont know where are the fields of geo_ip.

In logstash I use the geo_ip in filter like:

geoip{
                        source => "client_ip"
                }

In Kibana I create and map the field location to the type geo_point:

"location": {
          "type": "geo_point"
        },

with the debug print of logstash I can see the info of the function geo_ip :

"geoip" => {,
                             "country_code2" => "EN",,
                               "region_code" => "12",,
                                        "ip" => "95.55.55.55",,
                               "postal_code" => "2336-003",,
                                 "city_name" => "Parede",,
                                  "timezone" => "Europe/Paris",,
                                  "latitude" => 31.6928,,
                              "country_name" => "France",,
                               "region_name" => "Paris",,
                            "continent_code" => "EU",,
                             "country_code3" => "PT",,
                                  "location" => {,
                                                  "lat" => 31.6928,,
                                                  "lon" => -10.3541,
                                                },,
                                  "longitude" => -10.3541,
                          },,

What I have to do to maps recognize the geoip info?

Thank you

2

have you created the Index Pattern in Kibana?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.