My custom logs are sent from filebeat (ingest pipeline) -> logstash -> elasticsearch . Now i need to make custom index for retention period purpose. when i try the custom index my geo_ip not mapping correct one.
If your problem is that [geoip][location] is not a geo_point then yes, you need to supply a template that matches your index name that tells ES that it should be.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.