Elastic Tile Service - how tos

(bowow) #1

Can someone tell me how to use the 'Elastic Tile Service'
Is the configuration different than the previous tile service?

Do i still use same line as before?

geoip {
source => "clientip"
target => "geoip"
database => "/etc/logstash/GeoLiteCity.dat"
add_field => [ "[geoip][coordinates]", "%{[geoip][longitude]}" ]
add_field => [ "[geoip][coordinates]", "%{[geoip][latitude]}" ]
mutate {
convert => [ "[geoip][coordinates]", "float"]

(Mark Walkom) #2

This is not an Elasticsearch question, please move it to the correct area.

Yes, use the same as before, just make sure you are running the latest KB.

(Mark Walkom) #4

There is no geoip field in that mapping, so I'd check that your config works correctly.

(bowow) #6

I figured out why it was not mapping the geoip..I had use the index name as "logstash-%{+YYYY.MM.dd}"
Now i am able to see the geoip field in kibana..

However, I am still not able visualize the geoip in tile map.. it's saying "No results found"

Anyone has any clue with it's not showing anything on the map?

(Mark Walkom) #7

Please stop making multiple threads on the same thing - Tile map "no results found"

(Mark Walkom) #8