bishaka
(bowow)
August 15, 2016, 6:21pm
1
Can someone tell me how to use the 'Elastic Tile Service'
Is the configuration different than the previous tile service?
Do i still use same line as before?
geoip {
source => "clientip"
target => "geoip"
database => "/etc/logstash/GeoLiteCity.dat"
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
}
mutate {
convert => [ "[geoip][coordinates]", "float"]
}
warkolm
(Mark Walkom)
August 15, 2016, 10:10pm
2
This is not an Elasticsearch question, please move it to the correct area.
Yes, use the same as before, just make sure you are running the latest KB.
warkolm
(Mark Walkom)
August 15, 2016, 10:58pm
4
There is no geoip
field in that mapping, so I'd check that your config works correctly.
bishaka
(bowow)
August 15, 2016, 11:16pm
6
I figured out why it was not mapping the geoip..I had use the index name as "logstash-%{+YYYY.MM.dd}"
Now i am able to see the geoip field in kibana..
However, I am still not able visualize the geoip in tile map.. it's saying "No results found"
Anyone has any clue with it's not showing anything on the map?
warkolm
(Mark Walkom)
August 16, 2016, 12:14am
7
Please stop making multiple threads on the same thing - Tile map "no results found"