# Geo\_point : elastisearch 5.6.4 on RPI3
**URL:** https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092
**Category:** Elasticsearch
**Created:** [May 16, 2018, 10:22am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092 "2018-05-16T10:22:24Z")
**Posts on this page:** 10
**Page:** 1
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 16, 2018, 10:22am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/1 "2018-05-16T10:22:25Z")
Hi, i reset my instance (perfectly running from 4 months) due to design and shard computation issues on this tiny machine. Unfortunately, all is running again as a charm except MAP. I read many blogs, threads but no one give me the solution.
My geoIP filter is running fine (country code, lat, long are ok ) but the MAP is gone... when i select a new map and geo hash i have this item **No Compatible Fields: The "logstash-\*" index pattern does not contain any of the following field types: geo\_point.**
Geoip pipeline filter is running and coordinates are filled as well as city, iso\_code ? i got this issue one time but i forgot and could not found how i solved !
I tried all the sorcery and need accuracy 😀 thanks
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 16, 2018, 7:06pm UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/2 "2018-05-16T19:06:05Z")
here get **GET / \_mapping**
**{**
"logstash-2018.05": {
"mappings": {
"syslog": {
"properties": {
"@timestamp": {
"type": "date"
},
"@version": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"CPU": {
"type": "long"
},
"Disk": {
"type": "long"
},
"Port": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"RAM": {
"type": "long"
},
"Temp": {
"type": "long"
},
"Varx": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
**"geoip": {**
\*\* "properties": {\*\*
\*\* "city\_name": {\*\*
\*\* "type": "text",\*\*
\*\* "fields": {\*\*
\*\* "keyword": {\*\*
\*\* "type": "keyword",\*\*
\*\* "ignore\_above": 256\*\*
\*\* }\*\*
\*\* }\*\*
\*\* },\*\*
\*\* "continent\_name": {\*\*
\*\* "type": "text",\*\*
\*\* "fields": {\*\*
\*\* "keyword": {\*\*
\*\* "type": "keyword",\*\*
\*\* "ignore\_above": 256\*\*
\*\* }\*\*
\*\* }\*\*
\*\* },\*\*
\*\* "country\_iso\_code": {\*\*
\*\* "type": "text",\*\*
\*\* "fields": {\*\*
\*\* "keyword": {\*\*
\*\* "type": "keyword",\*\*
\*\* "ignore\_above": 256\*\*
\*\* }\*\*
\*\* }\*\*
\*\* },\*\*
\*\* "location": {\*\*
\*\* "properties": {\*\*
\*\* "lat": {\*\*
\*\* "type": "float"\*\*
\*\* },\*\*
\*\* "lon": {\*\*
\*\* "type": "float"\*\*
\*\* }\*\*
\*\* }\*\*
\*\* },\*\*
\*\* "region\_name": {\*\*
\*\* "type": "text",\*\*
\*\* "fields": {\*\*
\*\* "keyword": {\*\*
\*\* "type": "keyword",\*\*
\*\* "ignore\_above": 256\*\*
\*\* }\*\*
}
}
}
},
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 17, 2018, 6:27am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/3 "2018-05-17T06:27:58Z")
It doesn't look like you have a location field that is mapped correctly. Check out [https://www.elastic.co/blog/geoip-in-the-elastic-stack](https://www.elastic.co/blog/geoip-in-the-elastic-stack) for some guidance on how to resolve this.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 18, 2018, 6:03am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/4 "2018-05-18T06:03:05Z")
Hi Mark, I have already read your blog before and re-read again. I am still stuck. I remembered because i am living in sydney too 😀
I run the command PUT /.kibana/\_mapping/syslog
{
"properties": {
"geoip": {
"properties": {
"location": {
"type": "geo\_point"
}
} }
}
}
it return true. i reload but i still have the same message on the map (cf screen shot) .
pipeline filter is running fine too. lat-lon are filled correctly.
"geoip": {
"properties": {
"city\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"continent\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"country\_iso\_code": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
},
"location": {
"properties": {
"lat": {
"type": "float"
},
"lon": {
"type": "float"
}
}
},
"region\_name": {
"type": "text",
"fields": {
"keyword": {
"type": "keyword",
"ignore\_above": 256
}
}
}
}
---
### Author:  [@Christian\_Dahlqvist](https://discuss.elastic.co/u/Christian_Dahlqvist)
#### Post date: [May 18, 2018, 6:09am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/5 "2018-05-18T06:09:57Z")
Once an index has defined a mapping for a field, you can not change that without reindexing your data. You should add the mapping to an [index template](https://www.elastic.co/guide/en/elasticsearch/reference/6.2/indices-templates.html) so that it will apply to all new indices. You can then reindex your data into new indices and this template will apply and correct your mapping.
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [May 18, 2018, 7:23am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/6 "2018-05-18T07:23:48Z")
You are defining a `geoip.location` field, but the pipeline creates `geoip.lat` and `geoip.lon`.
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 18, 2018, 7:31pm UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/7 "2018-05-18T19:31:15Z")
> [@Christian\_Dahlqvist](#):
>
> You should add the mapping to an index template 2 so that it will apply to all new indices. You can then reindex your data into new indices and this template will apply and correct your mapping.
reindex your data into new indices:
**I created a template my\_logs with geo\_point using PUT /\_template/my\_logs**.
- I know how to reindex logstach-\* to a new index nlogstash\* using Post \_reindex
POST \_reindex
{
"source": {
"index": "logstash-\*"
},
"dest": {
"index": "nlogstash-2018-05",
"version\_type": "internal"
}
}
- **but i don't know how to apply the template my\_logs to the newindex because when i created a map with nlogstash- i have the same issue with geo\_point ?**
* * *
PUT /\_template/my\_logs
{
"template": "logstash-_",
"order": 1,
"settings": {
"number\_of\_shards": 1
},
"mappings" : {
"default" : {
"\_all" : {"enabled" : true},
"dynamic\_templates" : [ {
"string\_fields" : {
"match" : "_",
"match\_mapping\_type" : "string",
"mapping" : {
}
}
} ],
"properties" : {
"geoip" : {
"type" : "object",
"dynamic": true,
"properties" : {
"location" : { "type" : "geo\_point" }
}
}
}
}
}
}
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 21, 2018, 11:12am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/8 "2018-05-21T11:12:31Z")
heya, can you check my last reply please ? thanks 😥
---
### Author:  [@bruno-d](https://discuss.elastic.co/u/bruno-d)
#### Post date: [May 22, 2018, 8:43am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/9 "2018-05-22T08:43:02Z")
Hi, I created a template adding geo\_point. The template is fine. I reindex my old index to a new one but the template does not apply ? might miss something see previous message. thanks in advance. regards
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [June 19, 2018, 8:43am UTC](https://discuss.elastic.co/t/geo-point-elastisearch-5-6-4-on-rpi3/132092/10 "2018-06-19T08:43:09Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.