# GEO POINT Problem
**URL:** https://discuss.elastic.co/t/geo-point-problem/142958
**Category:** Beats
**Tags:** filebeat
**Created:** [August 3, 2018, 5:25pm UTC](https://discuss.elastic.co/t/geo-point-problem/142958 "2018-08-03T17:25:57Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@puccibox73](https://discuss.elastic.co/u/puccibox73)
#### Post date: [August 3, 2018, 5:25pm UTC](https://discuss.elastic.co/t/geo-point-problem/142958/1 "2018-08-03T17:25:57Z")
Hallo, i'im using filebeat from my servers mainly to track access log via ssh, now I'm trying to add geoIP filter for Public Server, in order to create a map to track ssh attacks attempts,
this is my filter
\<
filter {
if [type] == "syslog" {
grok {
match =\> { "message" =\> "%{SYSLOGTIMESTAMP:syslog\_timestamp} %{NOTSPACE:syslog\_hostname} %{DATA:syslog\_program}(?:[%{POSINT:syslog\_pid}])?: %{DATA:Status}? %{DATA:Ktype}? (for)? %{GREEDYDATA:syslog\_user} (from)? %{IP:ip\_address}?%{GREEDYDATA:syslog\_message\_tail}?" }
add\_field =\> ["received\_at", "%{@timestamp}"]
add\_field =\> ["received\_from", "%{host}"]
}
geoip {
source =\> "ip\_address"
target =\> "geoip"
}
date {
match =\> ["syslog\_timestamp", "MMM d HH:mm:ss", "MMM dd HH:mm:ss"]
}
}
}
/\>
When I go in discover section in Kibana, I can see the geoip parts, put I have no geoip.location, but two separate fields geoip.location.lat and Lon and when I try to create a visualization I have the common problem, Kibana (No geo\_point type)
I output from filebeat using "filebeat-geo-\*" index name in order to use filebeat/logstash template that should work, and also if I try tu get with curl the informations from my index patterns I can see the "location" field with the correct values, what else I'm missing? Im quite new to elastic search ...
Thanks in advance
---
### Author:  [@puccibox73](https://discuss.elastic.co/u/puccibox73)
#### Post date: [August 6, 2018, 9:43am UTC](https://discuss.elastic.co/t/geo-point-problem/142958/2 "2018-08-06T09:43:43Z")
wow, 23 views and no-one helping me even in finding a solution in some other post ?
I think it should be something connected with mappings, creating a custom index I succeed in creating a geo\_point type mapping for geoip.location field, and even if I see it as a geo\_point type, in discover he is treated as a float, If I add a visualization I can select the filed ( non error "No geo\_point type) but my map remains empty !
Hope these more details can help someone in helping me...
Sincerely
Fabrizio
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [September 3, 2018, 9:43am UTC](https://discuss.elastic.co/t/geo-point-problem/142958/3 "2018-09-03T09:43:49Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.