Expected geo_point type on field [geoip.location], but got [double]

(pedro) #1

I've a Tile Map visualisation that is throwing a "Expected geo_point type on field [geoip.location], but got [double]" error.

I'm a newbie with the ELK stack.

My geoip json object is like the following:
geoip": {
"ip": "182.2XX.XX.XXX",
"country_code2": "TH",
"country_code3": "THA",
"country_name": "Thailand",
"continent_code": "AS",
"region_name": "40",
"city_name": "Bangkok",
"latitude": 1X.XXXXXXXXXXX999,
"longitude": 1XX.XXXXXXXXXXX999,
"timezone": "Asia/Bangkok",
"real_region_name": "Krung Thep",
"location": [

As far as I understand, the geoip.location is an array of two coordinates which I presume it is a geopoint type.
Can someone point me in the right direction? I'm completely lost here.

No Compatible Fields: The "logstash-*" index pattern does not contain any of the following field types: geo_point
(CJ Cenizal) #2

Hi there,

It looks like your index mappings may not be set up correctly (https://www.elastic.co/guide/en/elasticsearch/reference/current/mapping.html).

I think you'll need to update your mapping to specify that the "location" property of your document is a "geo_point" (https://www.elastic.co/guide/en/elasticsearch/reference/current/geo-point.html).

Hope this helps,

(pedro) #3

You are correct!

I forgot to set them, I set them and it works like a charm, thanks.

(system) #4