Filebeat Azure module not supporting geoip map visualisation

ankitdevnalkar · April 29, 2021, 7:27am

I am working with custom index, I copied Filbeat ingest pipeline and just modified name to use for my custom index. When data loaded, I can see geoip lookup data but when I go to create map visualisation it doesn't support.
Note : I changed geoip.location data type to geo_point but no success.

here is my mapping configurations

gist.github.com

https://gist.github.com/ankitdevnalkar/6d884eed329ccf2b0e036047b9d55e9e

gistfile1.txt

PUT _template/cloud-audit-azure
{
  "index_patterns": "cloud-audit-azure*",
  "version" : 50001,
  "settings" : {
    "index.refresh_interval" : "5s"
  },
  "mappings" : {
    "properties" : {
        "@timestamp" : {

This file has been truncated. show original

system · May 27, 2021, 9:28am

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.