Geo_location

Elastic Stack Kibana
1

Hello.
Tell me please, how to change field type in kibana?
I send next json object:
{
"severity":"info",
"hostname":"pc04133-free",
"@timestamp":"2017-08-10T13:13:11.186Z",
"host-ip":"127.0.0.1",
"@version":"1",
"location":"50.4501,30.5234",
"programname":"sshd",
"procid":"28024",
"host":"10.10.46.38",
"message":" input_userauth_request: invalid user nenych [preauth]",
"type":"rsyslog",
"facility":"auth"
}

How i can force kibana change field "location" to geo_point type?
Thanks a lot.

2

Hi @Mike_Nenych. There's no way to change a field's type after it has been created in Elasticsearch. To specify a field's type you need to do so before indexing any data by defining a mapping. The best way to do this is to create a index template that will match all of the indices that need this mapping. For data you've already indexed, you can use the reindex API or if you still have the source documents simply delete the indices and re-ingest your data.

3

Thanks for Your reply, I will try to create new indexes.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.