hi @Brian_Seel
First What Version are you on?
2nd my understanding is that there is no data type geohash, geohash is an aggregation used to aggregate geo_point
data.
Apologies but from the one line log line I can not tell, not enough context.
Where did that log come from Logstash?
Did you create an index_template manually like in the thread referenced, are you using a beat module?
Are you trying to manage the template from Logstash?
Both?
The typically flow if you are creating custom data is ..
- Create and index template with the desired data types
- Create your logstash to read, transform and load your data
- Iterate 1 & 2 till you get it right, may include delete the index template until you get it right
- Discover and visualize the data. If the data has a geo_point data type it should show up automatically in the drop downs when you try to create a visualization.
But yes based on that context if "looks" like it is there is a geo_point data type...
you can check by running these commands in the Dev tools
GET /name-of-index/_mapping
And look at the mappings you should see something like this....
{
"city_center" : {
"mappings" : {
"properties" : {
"location" : {
"type" : "geo_point"
},
"name" : {
"type" : "text"
}
}
}
}
}
and if you run a search it should look something like
GET /city/_search
{
"took" : 0,
"timed_out" : false,
"_shards" : {
"total" : 1,
"successful" : 1,
"skipped" : 0,
"failed" : 0
},
"hits" : {
"total" : {
"value" : 1,
"relation" : "eq"
},
"max_score" : 1.0,
"hits" : [
{
"_index" : "city_center",
"_type" : "_doc",
"_id" : "oAzB8mwBheMK44zyIkBj",
"_score" : 1.0,
"_source" : {
"name" : "stamford",
"location" : [
-73.554212,
41.053923
]
}
}
]
}
}
You should also be able to see the index_templates using this
GET /_template/name-of-template